aeondave/kismet
offensive-tools/wireless/kismet/SKILL.md
Auth/lab ref: Passive wireless sniffer, WIDS, and wardriving platform for Wi-Fi, Bluetooth, Zigbee, and other RF sources.
$ install --global
skillsauthnpx skillsauth add aeondave/malskill kismetInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 9, 2026, 3:59 AM98.4s2 files scanned
SKILL.md
- name:
- kismet
- description:
- Auth/lab ref: Passive wireless sniffer, WIDS, and wardriving platform for Wi-Fi, Bluetooth, Zigbee, and other RF sources.
- license:
- MIT
- compatibility:
- Linux/macOS; requires compatible wireless adapter.
- author:
- AeonDave
- version:
- 1.0
Kismet
Passive RF collection, WIDS, and wardriving platform for Wi‑Fi, Bluetooth, Zigbee, and more.
Quick Start
apt install kismet
# Start with web UI (port 2501)
kismet -c wlan0
# Open web UI
open http://localhost:2501
# Default creds: kismet/kismet
# Capture to pcap
kismet -c wlan0 --log-types pcapppi
Why Use It
Choose kismet when you need:
- passive discovery with minimal RF disturbance
- hidden SSID / client / rogue-device visibility
- long-running sensor logging
- multi-protocol visibility beyond Wi‑Fi
- distributed capture and automation via API
Key Features
| Feature | Purpose | |---------|---------| | AP discovery | SSID, BSSID, channel, encryption, signal | | Client tracking | Devices associated to APs | | Bluetooth | BT classic + BLE scanning (with adapter) | | Zigbee | IoT/sensor network detection | | GPS integration | Map devices with gpsd | | Logging | Kismet DB, pcap, JSON, netxml |
Core Flags
| Flag | Purpose |
|------|---------|
| -c IFACE | Capture interface |
| --no-logging | Disable logging |
| --log-prefix DIR | Log output directory |
| --log-types TYPE | Log formats |
| --daemonize | Run in background |
| --override wardriving | Wardriving mode |
Common Workflows
Passive wardriving:
kismet -c wlan0 --override wardriving --log-prefix /tmp/wardriving
Capture all traffic for offline analysis:
kismet -c wlan0 --log-types pcapppi --log-prefix /tmp/capture
# Analyze with wireshark
Long-running passive logging with unified metadata:
kismet -c wlan0 --log-prefix /tmp/kismet
What Makes It Strong
- unified
kismetdblogging for devices, packets, runtime data, and location - distributed remote capture over network links
- comprehensive REST API for scripting and integrations
- better fit than cracking tools when the objective is awareness, baselining, or passive detection
Best Fit
| Need | Better fit |
|------|------------|
| Passive WIDS / sensor platform | kismet |
| Handshake capture and cracking | aircrack-ng |
| Automated WPA/PMKID attacks | wifite |
| Combined Wi‑Fi/Bluetooth/HackRF GUI workflows | sparrow-wifi |
Resources
| File | When to load |
|------|--------------|
| references/distributed-capture-and-logging.md | For kismetdb logging, remote capture, API usage, and passive multi-RF positioning |
Related Skills
aeondave/unicorn
development
VerifiedTrustedCommunity
Auth/lab ref: Unicorn Engine CPU-only emulation for shellcode, decryptors, custom VM handlers, instruction tracing, memory hooks, and register-level experiments.
11SKILL.mdUpdated Jul 24, 2026
aeondave/renode
development
VerifiedTrustedCommunity
Auth/lab ref: Renode board and SoC simulation for MCU/RTOS firmware, UART/GPIO/peripheral modeling, GDB remote debugging, REPL platforms, and RESC scripts.
11SKILL.mdUpdated Jul 24, 2026
aeondave/qiling
development
VerifiedTrustedCommunity
Auth/lab ref: Qiling OS-layer binary emulation for PE/ELF/Mach-O/UEFI/shellcode with rootfs, syscall/API hooks, filesystem mapping, and runtime patching.
11SKILL.mdUpdated Jul 24, 2026
aeondave/qemu
databases
VerifiedTrustedCommunity
Auth/lab ref: QEMU user-mode and full-system emulation for cross-arch binaries, firmware, kernels, disks, serial consoles, networking, and GDB stubs.
11SKILL.mdUpdated Jul 24, 2026