<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Auditing Wireless Encryption Config — API & Tool Reference

> Quick reference for tools, commands, and APIs used in auditing-wireless-encryption-config.

## Tools


### `airodump-ng`

Wireless network scanner with encryption detection

**Usage:**
```bash
airodump-ng --band abg <interface>
```

**Key Flags:**
  - `--band: frequency bands`
  - `--output-format: csv,pcap,kismet`
  - `-w: output prefix`

---

### `wash`

WPS-enabled AP scanner

**Usage:**
```bash
wash -i <interface>
```

**Key Flags:**
  - `-i: monitor interface`
  - `-C: WPS enabled only`
  - `-s: scan time`

---

### `tshark`

802.11 frame analysis for cipher inspection

**Usage:**
```bash
tshark -i <interface> -Y <filter>
```

**Key Flags:**
  - `-Y: display filter`
  - `-T fields: field output`
  - `-e: field extraction`

---

### `reaver`

WPS PIN brute force tool

**Usage:**
```bash
reaver -i <interface> -b <bssid>
```

**Key Flags:**
  - `-i: monitor interface`
  - `-b: target BSSID`
  - `-vv: verbose output`
  - `-K: PixieWPS attack`

---


## Integration Notes

- All tools should be run with least-privilege access appropriate to the task
- Log all tool invocations for audit trail
- Validate tool output before acting on results
- Cross-reference findings with multiple tools where possible

## See Also

- Parent skill: [Wireless Security](../../../SKILL.md)
- Technique SKILL.md: [../SKILL.md](../SKILL.md)
