Files
sabia/docs/cli.md
T
Lucas RayanandClaude Opus 5.5 791538c9d9 v0.1.0: logo, i18n pt/en, CI com caches, testes e documentação
- Logo oficial (sabia.png) e conjunto de ícones do app desktop.
- Interface em português e inglês: tradutor por observação do DOM, seletor
  de idioma e checagem de cobertura de tradução no CI.
- CI/CD com caches (rust-cache, .deb do Tauri em cache) e pipeline de release
  multiplataforma (CLI em 5 alvos + app desktop via tauri-action), templates
  de issue/PR.
- Suíte de testes de integração do sabia-core (scan e2e, handshake/crack
  4-way e PMKID, pcap, trilha de auditoria) — 46 testes verdes.
- Documentação completa pt/en: README, ROADMAP, SECURITY, CONTRIBUTING,
  CHANGELOG e docs/ (cli, interface, arquitetura), com enquadramento de uso
  autorizado.
- Correções de clippy (-D warnings) e formatação em toda a árvore.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-23 12:46:19 -03:00

2.5 KiB

Terminal (sabia)

English · Português

The sabia binary has the global option --audit <file> (audit trail; default .sabia-audit.log) and the commands below. Capture and monitor mode require Linux and root; analysis and cracking run on any platform.

iface — interfaces and monitor mode

sabia iface list                    # Wi-Fi interfaces and their modes
sabia iface channels <iface>        # channels the radio supports  [--json]
sudo sabia iface monitor <iface> on # enable monitor mode (on|off)

scan — capture the air

sudo sabia scan <iface> [options]
Option Effect
--channel <n> Fix a channel (without it, hops across the supported ones).
--band <2.4|5|6|all> Band when hopping channels.
--hop-ms <ms> Time on each channel (default 350).
--seconds <n> Stop after N seconds (default: until Ctrl+C).
--out <file.pcap> Save captured frames.
--crack <dictionary> After capturing, try to crack the first handshake.
--json Print only the final JSON.

Shows networks (APs), clients and handshakes seen (4-way and PMKID).

analyze — read a .pcap offline

sabia analyze <file.pcap> [--json]

crack — dictionary cracking

sabia crack <file.pcap> --wordlist <list.txt> [--bssid <mac>] [--station <mac>] [--json]

Recomputes the PMK with PBKDF2-HMAC-SHA1 and checks the MIC (4-way) or the PMKID, for WPA/WPA2-PSK. --bssid/--station filter which handshake to use.

deauth — authorized deauthentication test

sudo sabia deauth <iface> --bssid <mac> [--station <mac>] [--count 5] [--reason 7] --yes

Without --station, the target is broadcast. The --yes flag confirms you are authorized to test this network — without it, the command refuses. It is recorded in the audit trail.

doctor — diagnostics

sabia doctor [--json]

Checks privileges, tools (iw, ip) and monitor-capable interfaces.

audit — audit trail

sabia audit verify [file]      # check the hash-chain integrity
sabia audit show [--limit 20]  # latest entries

update — updating

sabia update           # check for a new version
sabia update --apply   # download, verify the SHA-256 and swap the executable

ui — desktop/web interface

sabia ui [--port 4337] [--no-open]

Starts the local interface server and opens the browser (or not, with --no-open).