<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Implementing Wireless Security Policy — API & Tool Reference

> Quick reference for tools, commands, and APIs used in implementing-wireless-security-policy.

## Tools


### `freeradius`

RADIUS server for 802.1X authentication

**Usage:**
```bash
freeradius -X
```

**Key Flags:**
  - `-X: debug mode`
  - `-C: config check only`

---

### `radtest`

RADIUS authentication test client

**Usage:**
```bash
radtest <user> <pass> <server> <port> <secret>
```

**Key Flags:**
  - `Tests RADIUS authentication flow`

---

### `eapol_test`

802.1X EAP authentication tester

**Usage:**
```bash
eapol_test -c <config> -s <secret>
```

**Key Flags:**
  - `-c: config file`
  - `-s: shared secret`
  - `-a: server address`

---

### `airodump-ng`

Wireless network audit scanner

**Usage:**
```bash
airodump-ng [options] <interface>
```

**Key Flags:**
  - `--band: frequency band`
  - `-w: output prefix`
  - `--output-format: csv`

---


## Integration Notes

- All tools should be run with least-privilege access appropriate to the task
- Log all tool invocations for audit trail
- Validate tool output before acting on results
- Cross-reference findings with multiple tools where possible

## See Also

- Parent skill: [Wireless Security](../../../SKILL.md)
- Technique SKILL.md: [../SKILL.md](../SKILL.md)
