[Matheus Garbelini] just came out with three (3!) different WiFi attacks on the popular ESP32/8266 family of chips. He notified Espressif first (thanks!) and they’ve patched around most of th… ...

Usually they put the ESP8266 in Access Point mode, allow the user to connect, and then ask which network they should authenticate with.