<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Detecting Rogue Access Points — API & Tool Reference

> Quick reference for tools, commands, and APIs used in detecting-rogue-access-points.

## Tools


### `kismet`

Wireless network detector, sniffer, and IDS

**Usage:**
```bash
kismet -c <source>
```

**Key Flags:**
  - `-c: capture source interface`
  - `--override: override config values`
  - `--no-ncurses: headless mode`

---

### `airodump-ng`

Wireless network scanner and packet capturer

**Usage:**
```bash
airodump-ng [options] <interface>
```

**Key Flags:**
  - `--output-format: csv,pcap,kismet`
  - `--write-interval: output interval`
  - `-w: output prefix`

---

### `macchanger`

MAC address changer for wireless interfaces

**Usage:**
```bash
macchanger -r <interface>
```

**Key Flags:**
  - `-r: random MAC`
  - `-s: show current`
  - `-p: reset to permanent`

---


## Integration Notes

- All tools should be run with least-privilege access appropriate to the task
- Log all tool invocations for audit trail
- Validate tool output before acting on results
- Cross-reference findings with multiple tools where possible

## See Also

- Parent skill: [Wireless Security](../../../SKILL.md)
- Technique SKILL.md: [../SKILL.md](../SKILL.md)
