Despite the name, it may be performed from a vehicle, on foot, or from another mobile platform. A tool can associate network identifiers, channels, advertised capabilities, signal strength, and approximate location with each detection.
Wardriving may be a passive survey, an authorized assessment, or reconnaissance preceding misuse; the label does not establish intent. Passive collection listens for transmissions, whereas active scanning sends frames and may attempt interaction. Detecting a network differs from joining it, bypassing access controls, intercepting protected content, or using its connectivity.
Key points
Observable informationManagement frames may reveal a service set identifier, basic service set identifier, channel, security capabilities, and radio characteristics even when application content is encrypted.
Passive and active methodsPassive observation sends no probe frames to the observed network, but retaining identifiers or location can create legal and privacy duties. Active scanning transmits frames and belongs only within explicit authorization; do not connect to or test third-party systems.
Defensive use and governanceAn organization can survey its perimeter for unintended coverage, weak configurations, impersonating networks, or unauthorized access points. Treat location and device data as potentially sensitive and avoid probing third-party systems.
Important limitationA wardriving observation is a point-in-time, location-dependent signal, not proof that a network is vulnerable, malicious, owned by a particular party, or reachable later. Suppressing routine SSID advertisement does not prevent discovery, and stronger authentication does not stop radio detection.