Kismet
Kismet integrates a WiFi Coconut capture tool as of 2022-08-11-nightly .
To get the latest nightly builds, either install a supported package directly from the Kismet package repositories, or build it from source. When building from source, follow the directions on the Kismet site, and include the configuration flag --enable-wifi-coconut to build the WiFi Coconut capture tools.
When installing from packages, be sure to install the kismet-capture-hak5-wifi-coconut package!
For example to install the Kismet Nightly packages with WiFi Coconut support, first add the repositories on your system per the directions on the Kismet site then:
Kismet Nightly packages with WiFi Coconut support are available for Kali, Ubuntu Focal, and Ubuntu Jammy on amd64, arm64, and armhf. Support for the WiFi Coconut can be built on other platforms by following the compile directions.
The WiFi Coconut package will likely only be available from the official Kismet package repositories, until the distributions have had a chance to integrate the changes. If you can't find the package, make sure you've added the Kismet repositories to your system!
The WiFi Coconut can be used with Kismet on macOS by following the directions on the Kismet site for compiling Kismet.
Unfortunately, it is not possible to use the WiFi Coconut with Kismet on Windows, because the WSL and WSL2 environments do not support passing USB devices to the Linux layer.
Enabling the WiFi Coconut in Kismet
Kismet uses the source coconut-N to identify the coconut. The number of the Coconut depends how it was found on the USB bus.
To find your WiFi Coconut interface for Kismet, use the kismet_cap_wifi_coconut tool which is installed when you install the Kismet WiFi Coconut support - if you don't have it, make sure you've installed the WiFi Coconut code!
Run the command kismet_cap_hak5_wifi_coconut --list. If a WiFi Coconut is found, you'll see the following:
Kismet can now be started using the source coconut-2 or as simply coconut if there is only one:
Remember! kismet_cap_hak5_wifi_coconut must be running as root! If installing from the Kismet packages you'll be prompted to install the Kismet tools as suid-root; if you do not do this, or if you install from source or some other way, you must either make the Kismet wifi coconut binary suid root manually, or run all of Kismet as root!
Enabling the WiFi Coconut via the Kismet UI
You can enable the WiFi Coconut via the Kismet UI by selecting it in the Datasources view.
When you first connect a WiFi Coconut, Linux will detect the individual radios. Be sure to select the WiFi Coconut device in Kismet! Once you select the WiFi Coconut and enable it, the raw radio interfaces will disappear.
Using the WiFi Coconut as individual radios
Alternately, the WiFi Coconut can be used in Kismet as individual radios when running on Linux.
Other operating systems do not have monitor capable drivers, so you must use the WiFi Coconut integration on macOS.
When first connected, the Linux kernel drivers will present 14 independent WiFi radios.
If you so wish, you can assign all 14 radios to Kismet as you would any other radio, and Kismet will automatically distribute channels across them.
Remember - never transmit using the WiFi Coconut! Kismet places the radios in monitor mode and does not transmit, but other tools such as Aircrack-ng which transmit packets should not be used on the WiFi coconut radios!
Last updated
