Modern WPA2 cracking doesn't require deauthing a single client. A walkthrough of capturing the PMKID from a single EAPOL frame and running it through hashcat — and what network defenders can actually do about it.