<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Performing Wireless Network Audit — API & Tool Reference

> Quick reference for tools, commands, and APIs used in performing-wireless-network-audit.

## Tools

### `aircrack-ng`

Wireless security auditing suite

**Usage:**
```bash
airodump-ng wlan0mon --band abg
```

**Key Flags:**
  - `airmon-ng: monitor mode management`
  - `airodump-ng: packet capture and AP scanning`
  - `aireplay-ng: packet injection`
  - `aircrack-ng: key cracking`

---

### `kismet`

Wireless network detector and IDS

**Usage:**
```bash
kismet -c wlan0mon --override wardrive
```

**Key Flags:**
  - `-c: capture source`
  - `--override: config override`
  - `REST API on port 2501`

---

### `tshark`

802.11 frame analysis

**Usage:**
```bash
tshark -i wlan0mon -Y "wlan.fc.type_subtype == 0x08"
```

**Key Flags:**
  - `-i: capture interface`
  - `-Y: display filter`
  - `-T fields: field extraction`
  - `-e: field name`

---

## Integration Notes

- All tools should be run with least-privilege access appropriate to the task
- Log all tool invocations for audit trail
- Validate tool output before acting on results
- Cross-reference findings with multiple tools where possible

## See Also

- Parent skill: [Network Security](../../../SKILL.md)
- Technique SKILL.md: [../SKILL.md](../SKILL.md)
