7

I'm sort of confused due to contradicting information about it but I just want to know if it's important for an attacker to be on the same Wifi network if he wants to deauthenticate another user?

3
  • 2
    Deauthenticate from what? If you're talking about, deauthenticating from the wifi, they just need to be in physical proximity of the router.
    – nobody
    Commented Mar 6, 2023 at 0:06
  • 2
    What are your sources that are providing the conflict?
    – schroeder
    Commented Mar 6, 2023 at 9:08
  • 5
    @nobody the attacker doesn't even need to be near the router, only near to the client. In wifi, this is not always the same.
    – fraxinus
    Commented Mar 6, 2023 at 11:49

1 Answer 1

17

The attacker can deauth without being authenticated on the wifi network, but they must be within radio range of the access point.

5
  • 1
    Which station, the access point or the client?
    – Bergi
    Commented Mar 6, 2023 at 18:16
  • 1
    Do they need to be near the AP or near the client? Isn't the client the more important party?
    – schroeder
    Commented Mar 6, 2023 at 22:47
  • 3
    They need to be near the AP and know the MAC address of the client, they can get the clients mac address by listening to messages from the AP.to the client or to messages from the client to the AP. this is "radio near" so a high gain antenna pointed at the AP from a distance may suffice
    – Jasen
    Commented Mar 7, 2023 at 0:37
  • It took me a while, but aireplay-ng sends deauth frames to both the AP and the client. So if using that tool, you are expected to be in range of both. I'm wondering if you need to be in range of the AP at all, though.
    – schroeder
    Commented Mar 7, 2023 at 20:32
  • 1
    If you use jamming for indirect deauthentication you could be near either the router or the client.
    – secfren
    Commented Mar 7, 2023 at 22:55

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .