blog

SEAN K.H. LIAO

Get TLS chain from Wifi

create a monitoring interface

sudo iw dev wlp58s0 interface add wmon type monitor
sudo ip link set wmon up

wireshark filter for eap and (re)auth against the AP, Check for Server Hello

Note: if you get Unrecognized Protocol in place of Server Hello, just try again...

Export the certificates and start thinking about what to do with them :shrug: