Introduction

Welcome to the KisMAC wiki! KisMAC is an open-source and free stumbler/scanner application for Mac OS X. It has an advantage over MacStumbler / iStumbler / NetStumbler in that it uses monitor mode and passive scanning.

KisMAC supports several third party PCMCIA cards: Orinoco, PrismII, Cisco Aironet, Atheros and PrismGT. USB devices with Intersil Prism2, Ralink rt2570 and rt73, and Realtek rtl8187 chipsets are in progress towards full support as well. All of the internal AirPort hardware is supported for scanning.

Please note: This program is not intended for novices but for professional users. Take this as your warning, the rest of this wiki assumes you are prepared for advanced topics and know what you are doing with your system.

Thanks

We would like to take this opportunity to thank the fine people at MacPirate and MMOForge for their generosity in providing us hosting as we transitioned the entire project out of Germany. Please thank and support them if possible, and update your bookmarks to our new home on the interweb: http://kismac-ng.org !

Features

• Reveals hidden / cloaked / closed SSIDs
• Shows logged in clients (with MAC Addresses, IP addresses and signal strengths)
• Mapping and GPS support
• Can draw area maps of network coverage
• PCAP import and export
• Support for 802.11b/g
• Different attacks against encrypted networks
• Deauthentication attacks
• AppleScript-able
• Kismet drone support (capture from a Kismet drone)

Supported hardware chipsets

• Apple AirPort and AirPort Extreme (dependent upon Apple's drivers)
• Lucent Hermes I & II (Orinoco 2 and 11 Mbit)
• Intersil Prism 2, 2.5, 3 in PCMCIA and USB devices
• Cisco Aironet (with older 4.xx firmware)
• Intersil PrismGT
• Atheros PCMCIA
• Ralink rt2570 and rt73 USB devices
• Realtek RTL8187 USB (Alfa AWUS036H)

Crypto support

• Bruteforce attacks against LEAP, WPA and WEP
• Weak scheduling attack against WEP
• Newsham 21-bit attack against WEP

Donations

Click here to donate! All donations go directly to hardware to assist development and to keeping this site up and running.

Wiki Highlights

• Please read the FAQ before doing anything else!
• RSS Stream for your favorite RSS aggregator.
• Please put feature requests (without a patch) here instead of filing tickets (see the FAQ for login info).
• You can leave bug reports in the ticket system; questions and support requests here will be promptly closed.
• KisMAC forum at http://forum.kismac-ng.org/; questions and support requests belong here.
• Join us in #KisMAC on irc.freenode.net.
• You can join the mailing list.
• Troubleshooting AirPort Extreme - Steps to take when AirPort Extreme Passive Mode isn't working. Applies to 10.4.9 and previous.
• Instructions on how to build your own binary from the source code. Precompiled binaries are linked below.
• Want to know what cards to use? Look no further: the hardware list.
• Notes on some hardware (tips to make it work better with OS X or KisMAC).
• Our hardware - What stuff do we use, and what we think of it.
• Additional information - Some technical information on antennas and how WiFi works. Please add to this.
• gpsd - the best way to connect a GPS to KisMAC (and everything else).
• KisMAC comparison - (0.1 alpha release) - how does KisMAC compare to other stumblers? Please improve this comparison.
• Kismet drones in KisMAC (now with real instructions).
• Driver comparison table - What are the different drivers good for?
• External links of interest.

Latest Binary Build

• DO NOT POST THESE FILES ON MACUPDATE, VERSIONTRACKER, ETC!
• These are development builds, and are not for public release. They are often buggy or otherwise unstable! This is especially true of trunk right now!!
• If you are a resident of Germany, we advise you not to download this software or code. Doing so could be in breach of law StGB §202c.
• KisMAC trunk r294. The branches are no longer necessary.
• Older binary builds (r221 of trunk and r226 of usb-drivers, and newer) are available here, all also not for public release.
• Prism2 USB users will want to stick with r279 for injection support, available here.

^{All your base(station) are belong to us.}