WPA2 vs WPA3: Offline Dictionary Attack vs SAE Handshake
Capture a WPA2 4-way handshake and a WPA3 SAE (dragonfly) exchange for the same password, then watch an offline cracking attempt: WPA2 lets an attacker guess millions of passwords per second entirely offline, while WPA3's SAE handshake cannot be verified offline at all and only allows slow, throttled, detectable live guesses against the network.
Capture a handshake from a WPA2 network and a WPA3 network protected by the same password, then watch what an attacker can actually do with it. WPA2's captured 4-way handshake lets a cracking rig guess millions of passwords per second entirely offline. WPA3's SAE handshake gives the attacker nothing to check offline at all — every guess has to be tried live, one at a time, against the real access point, which is slow and detectable.
Capture a WPA2 4-way handshake and a WPA3 SAE (dragonfly) exchange for the same password, then watch an offline cracking attempt: WPA2 lets an attacker guess millions of passwords per second entirely offline, while WPA3's SAE handshake stalls at 0% because it cannot be verified offline at all, leaving only slow, throttled, detectable live guesses against the real access point.
3D · Three.js / WebGL renderer · 60 FPS target · runs fully client-side, no install