Wi-Fi Deauth Attacks, Explained Simply

Before WPA3, every Wi-Fi client could be forcibly disconnected by anyone with a cheap ESP32. The attack abuses management frames, which older Wi-Fi standards left unsigned.

A deauthentication frame carries a reason code (0x07 is popular) and a source MAC address that impersonates the access point. Clients receive it, believe the AP kicked them, and try to reconnect — over and over.

WPA3 introduces Protected Management Frames (PMF). Signed frames mean spoofed deauths get rejected. If your router supports WPA3, enable it.

1. Set your AP to WPA2 only for the test.
2. Use ESP32 Marauder or RF Clown V2 to run a targeted deauth against a burner device.
3. Enable WPA3+PMF and repeat — the same attack should now fail.