mansa

Authorized wireless security assessment from the terminal. Discover interfaces, enumerate access points, observe stations, and run the deterministic rule engine with transparent risk scoring — offline with --sim or on declared live scopes.

The eight stages

  • DISCOVER, list wireless interfaces and their capabilities (bands, modes, power)
  • ENUMERATE, scan for access points and record BSSID, SSID, channel, band, RSSI, protocols and cipher suites
  • OBSERVE, watch stations and traffic, client behavior, association patterns and signal anomalies
  • ANALYZE, run the deterministic rule engine (WLAN-001+) over the session
  • VALIDATE, cross-check each finding against raw evidence and hold confidence until confirmed
  • FINDINGS, deterministic IDs (WLAN--) with supporting evidence records
  • RISK, severity_weight × confidence × exposure_factor × 35, capped at 100
  • REPORT, terminal, markdown or JSON with a JSONL event stream (schema_version, execution_id, framework)
  • Authorization guarantee

    mansa assesses only the wireless networks and interfaces you explicitly declare and have authorization to test. Live scopes require an explicit authorization acknowledgement, while --sim runs the full deterministic pipeline offline against the built-in simulated dataset.

    Install

    curl -fsSL https://raw.githubusercontent.com/QYVORA/qyvora-mansa/main/install.sh | bash

    Usage

    • mansa assess --sim
    • mansa discover --sim
    • mansa scan --sim
    • mansa enumerate --sim
    • mansa observe --sim
    • mansa analyze
    • mansa findings
    • mansa evidence
    • mansa report -f json --out report.json