> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/hacking-wifi/wpa-wpa2-psk-network-attacks/reconnaissance-and-capture/passive-exploitation-techniques.md).
# 被动利用技巧
观察授权 WiFi 流量，在不干扰客户端的情况下捕获 WPA/WPA2 握手。
被动技术在不强制客户端断开连接的情况下观察网络活动。它可以在范围内的客户端连接或重新连接时捕获 WPA/WPA2 握手。
### 被动捕获
在评估期间，监控已批准的接入点和信道。等待客户端自然连接或重新连接。
### 当出现握手时
当客户端加入网络时，可能会出现握手。客户端短暂失去信号并重新连接时，也可能会出现握手。
例如，在模拟咖啡馆的测试网络中，等待已批准的客户端重新连接。在网络活动较少时，这种方法可能需要相当长的时间。
{% hint style="info" %}
被动观察可避免干扰客户端。它不能保证在固定时间内一定能捕获到握手。
{% endhint %}
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://hacking-notes.jord4n.pro/zh/hacking-wifi/wpa-wpa2-psk-network-attacks/reconnaissance-and-capture/passive-exploitation-techniques.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
