Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

i ran aireplay-ng -9 wlan0 and it seems that my intel PRO/Wireless 5100 AGN adapter does not support injection. i use Ubuntu 10.10 64bit (2.6.35-25-generic kernel). is it possible to make the adapter have injection capability? if yes, how?

share|improve this question
    
Is this a security question? I don't see the connection... –  AviD Feb 10 '11 at 23:30
    
i thought injection goes into the security category...if i am mistaken this question should be moved into an appropriate stackexchange site. –  sterz Feb 10 '11 at 23:33
1  
It should be moved to Server Fault. –  SteveS Feb 10 '11 at 23:41
1  
@SteveSyfuhs @AviD This question has to do with Wireless Penetration testing which is 100% Security. This 'can' probably be put on SF but someone over there is going to say it has to go here. –  WalterJ89 Feb 11 '11 at 0:37
1  
@WalterJ89 - I agree that Wireless Penetration Testing is in general an IT Security topic. However, this appears to be more of an application/OS/hardware troubleshooting question, which is probably more appropriate for SuperUser or ServerFault. –  Iszi Feb 11 '11 at 15:51
show 3 more comments

3 Answers

Try using Backtrack or Blackbuntu. Those two distribution have better driver support for packet injection. Some wireless cards need specially modified drivers. Once you figure out which one you need you can install it in Ubuntu. Backtrack and Blackbuntu are worth using for that purpose though.

Also it is worth noting that you MAY have better luck using a 32-bit OS, Backtrack for one is only 32-bit because most drivers and tools work better. I can't vouch for there being any issues with using a 64-bit OS though.

Good luck in your Penetration Testing. (I hope that's what your purpose is)

share|improve this answer
    
i tried backtrack 4 final release...did not help. i have read some workarounds including kernel patching but i probably will be better off buying a dongle that supports injection. –  sterz Feb 13 '11 at 19:00
    
check my edit plz –  hbdgaf Feb 13 '11 at 20:58
add comment

On a brand new install I did this:

first switch to root:
nano /etc/modprobe.d/intel-5300-iwlagn-disable11n.conf

make it look like this:
#options iwlagn 11n_disable=1
options iwlagn 11n_disable=1 swcrypto=1

Reboot and or in a terminal do something like the following

   
root@main:/home/bildr# modprobe -r iwlagn    
root@main:/home/bildr# modprobe iwlagn
root@main:/home/bildr# killall nm-applet    
root@main:/home/bildr# airmon-ng start wlan0    

Found 4 processes that could cause trouble.    
If airodump-ng, aireplay-ng or airtun-ng stops working after    
a short period of time, you may want to kill (some of) them!    

PID Name    
1028    NetworkManager    
1030    avahi-daemon    
1031    avahi-daemon    
1176    wpa_supplicant    


Interface   Chipset     Driver    

wlan0       Intel 4965/5xxx iwlagn - [phy0]    
                (monitor mode enabled on mon0)    

root@main:/home/bildr# aireplay-ng --test mon0    
15:25:36  Trying broadcast probe requests...    
15:25:36  Injection is working!    
15:25:38  Found 4 APs    

15:25:44  00:21:29:DB:C4:B4 - channel: 11 - 'Turbeville'    
15:25:45  Ping (min/avg/max): 1.418ms/31.889ms/47.236ms Power: -54.60    
15:25:45  30/30: 100%    
^C    

root@main:/home/bildr# airmon-ng stop wlan0    


Interface   Chipset     Driver    

wlan0       Intel 4965/5xxx iwlagn - [phy0]    
                (monitor mode disabled)    
mon0        Intel 4965/5xxx iwlagn - [phy0]    

root@main:/home/bildr# airmon-ng stop mon0    


Interface   Chipset     Driver    

wlan0       Intel 4965/5xxx iwlagn - [phy0]    
mon0        Intel 4965/5xxx iwlagn - [phy0] (removed)    

root@main:/home/bildr# modprobe -r iwlagn    
root@main:/home/bildr# modprobe iwlagn
root@main:/home/bildr# killall nm-applet    
bildr@main:/home/bildr# nm-applet &
  
share|improve this answer
    
which distro is this? –  sterz Feb 14 '11 at 12:26
    
ubuntu 10.10 and 11.x both work fine. bt4 is ubuntu based so it should work there too. if you go to the trouble of installing the drivers, it should work on anything debian derived. (may work on fedora family too, but I stay away from rmp based distros) –  hbdgaf Feb 14 '11 at 13:37
    
@sterz is there another distro you are worried about? if not plz accept. if yes plz tell me so I can make sure it works there –  hbdgaf Feb 18 '11 at 7:06
    
(sorry for the late reply) that doesnt work on ubuntu. at first, the test tells me that i can inject but when i run it parallel to airmon-ng it fails. –  sterz Apr 14 '11 at 19:23
    
I verified injecting fine on my end with airmon-ng. Are you sure hwcrypto is disabled? That will pooch it EVERY time(well if you're injecting into wpa/wep). To verify...try injecting into open and see if it works. I am absolutely sure it works on my card. May be some weirdness with a particular chipset(I ran a driftnet and replace demo off this laptop with some...less than stellar images). –  hbdgaf Apr 16 '11 at 16:58
add comment

I really can't remember if I ever got it to work on my ASUS X5AVN with Intel 5100 wireless network card. But I remember that I succesfully cracked a couple of test networks, but I used a USB dongle which supported Injection and Monitoring mode. I didnt do it the sufficient way, I used two laptops, my main laptop with the 5100 wireless and another laptop with backtrack and the USB dongle. My brother has my dongle at the moment, so I can not recall what name it is, but it supports bigger antennas.

I can recommend this site to find compatible cards for injection and monitoring mode.

Aircrack compatible cards

I have a little "bonus" info for you if you get it up and running, a person called G0tm1lk created a nice script for automatisation. I recommend you learn aircrack-ng before you use this script.

http://g0tmi1k.blogspot.com/2010/09/scriptvideo-wiffy-v01.html

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.