Squall

A hands-on wireless security lab performing both broadcast and targeted 802.11 deauthentication attacks against the team's own router ("for simulation," explicitly authorized/owned equipment) using Kali Linux and the Aircrack-ng suite, with results verified in Wireshark (captured disconnects and WPA2 4-way handshakes). Concludes with a defense-mechanism comparison (802.11w/PMF, WPA3, WIDS, firmware updates, VPN, MAC filtering). Extended with deauthguard/: a real, passive 802.11 deauthentication/disassociation flood detector -- the defensive counterpart the original never had. Analyzes a live monitor-mode interface or an offline PCAP using four independent, explainable detection rules grounded in real WIDS precedent (Kismet's DEAUTHFLOOD alert, Cisco's management-frame flood signatures), with 24 passing tests against synthetic PCAP fixtures and CI that runs the real suite.