offensive-tools/wireless/lswifi/SKILL.md
Auth/lab ref: CLI-centric Windows Wi-Fi scanning tool exposing richer nearby-network data than built-in commands, including RSSI, security details, information elements, 6 GHz Reduced Neighbor Reports, JSON/CSV export.
npx skillsauth add aeondave/malskill lswifiInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Windows-native CLI Wi‑Fi scanner for richer AP visibility, filtering, export, and event watching.
Use lswifi when you need:
netsh wlan show networkspython -m pip install lswifi
# basic scan
lswifi
# stronger-signal networks only
lswifi -t -60
# only matching SSIDs
lswifi -include Office
# JSON export-friendly output
lswifi --json
# Information elements for a specific BSSID
lswifi -ies 00:11:22:33:44:55
# Watch roaming / scan / connection events
lswifi --watchevents
# 6 GHz / RNR oriented view
lswifi -rnr
# export scan results
lswifi -export
lswifi is not traditional over-the-air monitor-mode packet capture. It uses Windows Native Wi‑Fi APIs, so treat it as a Windows-native survey/inspection tool, not as a full packet injection platform.
| Skill | Best use |
|---|---|
| lswifi | Windows-centric scan, export, filtering, event watching |
| kismet | Passive multi-sensor / multi-protocol RF visibility |
| aircrack-ng | Linux monitor-mode audit and capture workflows |
| File | When to load |
|---|---|
| references/filtering-export-workflows.md | For practical filters, exports, watch mode, and Windows-specific caveats |
development
Auth/lab ref: Unicorn Engine CPU-only emulation for shellcode, decryptors, custom VM handlers, instruction tracing, memory hooks, and register-level experiments.
development
Auth/lab ref: Renode board and SoC simulation for MCU/RTOS firmware, UART/GPIO/peripheral modeling, GDB remote debugging, REPL platforms, and RESC scripts.
development
Auth/lab ref: Qiling OS-layer binary emulation for PE/ELF/Mach-O/UEFI/shellcode with rootfs, syscall/API hooks, filesystem mapping, and runtime patching.
databases
Auth/lab ref: QEMU user-mode and full-system emulation for cross-arch binaries, firmware, kernels, disks, serial consoles, networking, and GDB stubs.