8

I'm sort of confused due to contradicting information about it but I just want to know if it's important for an attacker to be on the same Wifi network if he wants to deauthenticate another user?

Improve this question
3
  • 2
    Deauthenticate from what? If you're talking about, deauthenticating from the wifi, they just need to be in physical proximity of the router.
    – nobody
    Mar 6 at 0:06
  • 2
    What are your sources that are providing the conflict?
    – schroeder ♦
    Mar 6 at 9:08
  • 5
    @nobody the attacker doesn't even need to be near the router, only near to the client. In wifi, this is not always the same.
    – fraxinus
    Mar 6 at 11:49

1 Answer 1

Reset to default
18

The attacker can deauth without being authenticated on the wifi network, but they must be within radio range of the access point.

Improve this answer
5
  • 1
    Which station, the access point or the client?
    – Bergi
    Mar 6 at 18:16
  • 1
    Do they need to be near the AP or near the client? Isn't the client the more important party?
    – schroeder ♦
    Mar 6 at 22:47
  • 3
    They need to be near the AP and know the MAC address of the client, they can get the clients mac address by listening to messages from the AP.to the client or to messages from the client to the AP. this is "radio near" so a high gain antenna pointed at the AP from a distance may suffice
    – Jasen
    Mar 7 at 0:37
  • It took me a while, but aireplay-ng sends deauth frames to both the AP and the client. So if using that tool, you are expected to be in range of both. I'm wondering if you need to be in range of the AP at all, though.
    – schroeder ♦
    Mar 7 at 20:32
  • 1
    If you use jamming for indirect deauthentication you could be near either the router or the client.
    – secfren
    Mar 7 at 22:55

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .