OSWP · Module 15
Kismet Essentials
Use Kismet for long-running passive wireless monitoring across multiple interfaces, with a web UI, logging, and capture export.
~1 h 1 resource Last updated September 27, 2026
Kismet is a wireless detector, sniffer, and intrusion-detection system that complements airodump-ng. Where airodump-ng is a fast console scanner, Kismet excels at long-running passive monitoring across multiple interfaces and bands, logging everything it sees to a rich database and a web interface. PEN-210 uses it to map an environment, spot rogue and hidden devices, and export captures for analysis in Wireshark or the Aircrack-ng suite.
Passive Scanning with Kismet
Kismet runs fully passive: it never transmits, so it will not tip off a target. You install it on Kali, point one or more monitor-mode interfaces at it, and let it channel-hop or lock a source to a fixed channel. The web interface visualizes APs, clients, and probe activity in real time; the log files preserve every frame for later review; and captures export cleanly to Wireshark or aircrack-ng formats. Remote capture lets a separate sensor feed a central Kismet instance.
Read
The core material for this module. Where a guide goes deeper than needed, the relevant sections are highlighted.