Wireless Attackswificoconutwirelesssniffingpcapusbdriver

Wi-Fi Coconut

Userspace driver for USB Wi-Fi NICs and the Hak5 Wi-Fi Coconut. Provides tools to manage and interact with Wi-Fi Coconut devices for wireless operations.

Description

The hak5-wifi-coconut package supplies a userspace driver for the Hak5 Wi-Fi Coconut, a USB Wi-Fi device designed for advanced wireless tasks. It enables management of the device through the wifi_coconut command-line tool, which supports interactive and non-interactive modes for packet capture and device control.

Use cases include wireless network monitoring, packet logging to PCAP files, and multi-device handling in environments with multiple Wi-Fi Coconuts. The tool is particularly useful for penetration testers needing portable, high-performance Wi-Fi sniffing capabilities.

By default, wifi_coconut launches in interactive mode with LED indicators for status and traffic. Non-interactive options allow scripting and integration with other tools via piped PCAP output.

How It Works

The wifi_coconut tool interfaces with the Wi-Fi Coconut via USB using libusb-1.0-0 and firmware-mediatek. It manages device enumeration, channel selection UI (in interactive mode), and packet capture to PCAP format. LEDs provide visual feedback on traffic and status, with options to disable or invert them. The driver handles multiple devices and waits for connection, logging packets for analysis.

Installation

bash

sudo apt install hak5-wifi-coconut

Flags

--disable-ledsGo fully dark; don't enable any LEDs

--invert-ledsNormally a Wi-Fi Coconut enables all the LEDs and blinks during traffic; Invert only lights when there is traffic.

--disable-blinkingDisable blinking the LEDs on traffic

--no-displayDon't display channel UI while logging

--waitWait for a coconut to be found

--pcap=[fname]Log packets to a pcap file. If file is '-', a pcap file will be echoed to stdout so that it can be piped to other tools.

--wait-for-coconutWait for a coconut to be connected and identified

--list-coconutsList Wi-Fi Coconut devices and exit

--coconut-device=XIf you have multiple Wi-Fi Coconuts, specify which one to use

Examples

Display help and usage information for the Wi-Fi Coconut tool

wifi_coconut -h

Open the tool in interactive mode (default behavior)

wifi_coconut

Run the tool without enabling any LEDs for stealth operation

wifi_coconut --disable-leds

Log packets to a specified PCAP file

wifi_coconut --pcap=capture.pcap

Pipe PCAP output to stdout for real-time analysis with tcpdump

wifi_coconut --pcap=- | tcpdump -r -

List all connected Wi-Fi Coconut devices and exit

wifi_coconut --list-coconuts

Wait for a device and log without displaying the channel UI

wifi_coconut --wait --no-display

Updated 2026-04-16kali.org ↗