Scribd
Upload
643 views5 pages

KISMET - Scan and Watch Wifi User Activity: Download

This document provides instructions for using the Kismet software to scan for and monitor WiFi network activity. It describes how to install Kismet and any dependencies, configure the wireless card to monitor mode, run Kismet to detect nearby devices, view more information on selected networks and clients, and lock Kismet to a specific channel for persistent monitoring. It also discusses using Kismet's alerts to detect suspicious wireless behavior like spoofing or deauthentication attacks.

Uploaded by

bros07
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
643 views5 pages

KISMET - Scan and Watch Wifi User Activity: Download

This document provides instructions for using the Kismet software to scan for and monitor WiFi network activity. It describes how to install Kismet and any dependencies, configure the wireless card to monitor mode, run Kismet to detect nearby devices, view more information on selected networks and clients, and lock Kismet to a specific channel for persistent monitoring. It also discusses using Kismet's alerts to detect suspicious wireless behavior like spoofing or deauthentication attacks.

Uploaded by

bros07
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 5

KISMET – scan and watch wifi user activity

Download
git clone https://www.kismetwireless.net/git/kismet.git

install dependency
sudo apt-get install build-essential git libmicrohttpd-dev zlib1g-dev libnl-3-dev
libnl-genl-3-dev libcap-dev libpcap-dev libncurses5-dev libnm-dev libdw-dev
libsqlite3-dev

Install
cd kismet
./configure
make
complete the installation with the suidinstall option
sudo make suidinstall

add yourself to the Kismet group


sudo usermod -a -G kismet YourUsername

change wireless card to monitor mode


airmon-ng start wlan0

Run Kismet
kismet -c interface
Kismet start up and begin collecting packets
Once we start Kismet, we should see a list of all the Wi-Fi devices we can
detect nearby. The number of devices detected will vary depending on if
you're scanning 2.4 GHz, 5 GHz, or both. If you have the ability to add an
antenna to your wireless network adapter, a higher gain (or directional)
antenna can extend your range and the number of devices detected.

You can arrange these networks by name, signal strength, and other
properties. It's advised that you do so by signal strength so that you can see
what networks are strongest (and thus closest) first. Once you have a network
you'd like to target, click on it (or scroll down to it) in Kismet to learn more
information about it.

Upon highlighting a network, the first thing we'll notice is the list of wireless
clients appears in the main window. These are clients that are associated with
the network.
To learn more about a specific network's clients, you can, after highlighting
the network, click on "Windows" and then click on "Client List."

In the client window, we can see more information about each client in real
time

If you have a network that you want to monitor persistently, it's a good idea to
note the channel number. Since Kismet is exploring all channels by hopping
through them, you will miss all transmissions on one channel while Kismet is
scanning another. This packet fragmentation can cause you to lose data, so
once you identify the network you wish to watch, you should switch from
"scanning" to persistently monitoring one channel. This will allow you to
capture all activity on the channel.
To do this, click on "Kismet" in the top-left corner, and then click on "Config
Channel."

In the configuration window, select "Lock," and then enter the number of the
channel you want to monitor.

Watch for Patterns & Explore Around You


Human behavior will have an effect on the wireless signals around you, and
Kismet can let you watch these normally imperceivable changes in the
wireless environment. It doesn't matter that these networks are encrypted
because the relationships between them and plaintext portions of packets are
more than enough. By watching the type of traffic flowing across networks,
we can take a step beyond simply seeing what is around us and instead begin
to learn how these networks are used and by whom.

In particular, Kismet has an "Alerts" section in the menu under "Windows"


that will warn you of any suspicious wireless behavior. This can detect things
like networks switching channels, deauth packets, networks spoofing other
networks, and APs that are rapidly switching names. Our writers accidentally
turned on a Hak5 Wi-Fi Pineapple while monitoring with Kismet and nearly
had a panic attack when a torrent of incredibly serious sounding alert
messages started cascading down our screen detecting what was obviously
targeted Wi-Fi hacking.

You might also like