<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Performing Wi-Fi Penetration Testing — API & Tool Reference

> Quick reference for tools, commands, and APIs used in performing-wifi-penetration-testing.

## Tools


### `airmon-ng`

Wireless interface monitor mode manager

**Usage:**
```bash
airmon-ng start <interface>
```

**Key Flags:**
  - `-c: check for interfering processes`
  - `start: enable monitor mode`
  - `stop: disable monitor mode`

---

### `airodump-ng`

Wireless network scanner and packet capturer

**Usage:**
```bash
airodump-ng [options] <interface>
```

**Key Flags:**
  - `-c: channel`
  - `--bssid: filter by BSSID`
  - `-w: output file prefix`
  - `--band: frequency band (a/b/g)`

---

### `aireplay-ng`

Wireless packet injection and replay tool

**Usage:**
```bash
aireplay-ng -0 <count> -a <bssid> <interface>
```

**Key Flags:**
  - `-0: deauthentication attack`
  - `-1: fake authentication`
  - `-3: ARP request replay`
  - `-c: target client MAC`

---

### `hcxdumptool`

PMKID and handshake capture tool

**Usage:**
```bash
hcxdumptool -i <interface> -o <output> --enable_status=1
```

**Key Flags:**
  - `--filterlist_ap: target BSSID filter`
  - `--filtermode: 1=whitelist 2=target`
  - `--enable_status: status output level`

---

### `hashcat`

Advanced password recovery utility

**Usage:**
```bash
hashcat -m 22000 <hashfile> <wordlist>
```

**Key Flags:**
  - `-m 22000: WPA-PBKDF2-PMKID+EAPOL`
  - `-r: rules file`
  - `--status: show progress`
  - `-w 3: workload profile`

---


## Integration Notes

- All tools should be run with least-privilege access appropriate to the task
- Log all tool invocations for audit trail
- Validate tool output before acting on results
- Cross-reference findings with multiple tools where possible

## See Also

- Parent skill: [Wireless Security](../../../SKILL.md)
- Technique SKILL.md: [../SKILL.md](../SKILL.md)
