Skip to main content

Questions tagged [aircrack-ng]

An 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured.

Filter by
Sorted by
Tagged with
1 vote
1 answer
101 views

In WPA handshake brute force attack, how can attacker find PMK if MIC is performed using only HALF of PTK?

Brute force attack against WPA is the most common attack against WPA/WPA2 networks. Attacker captures the 4-way handshake that allows the authentication key to be cracked offline. During the 4-way ...
allexj's user avatar
  • 129
0 votes
0 answers
36 views

Why am I having trouble capturing and transmitting ARP packets to increase data in a WPA2 network injection attack?

I'm trying to inject packets into my own WPA2 network and rapidly increase the data packets. I've followed these steps: Connected my wireless adapter to my Kali Linux machine. Put my wireless adapter ...
Mohammad dehghani's user avatar
1 vote
0 answers
46 views

Why isn't airolib-ng generating PMKs from the database after importing a password list and ESSID?

I have been trying to create PMKs using airolib-ng with a password list generated by crunch and an ESSID text file. Here's the process I followed: Created a password list file using crunch and saved ...
Mohammad dehghani's user avatar
1 vote
0 answers
177 views

aireplay-ng --deauth never finds BSSID available

I've been trying to crack wifi wpa2 handshake using airodump-ng and aireplay-ng. I'm using alfa awus-036acs adapter. sudo airodump-ng wlan0 sudo airodump-ng --bssid MAC ADDR of AP --channel 1 -w ...
Michał Matusik's user avatar
2 votes
1 answer
431 views

airodump-ng no associated station

i have a question many people asked in the last years but there seem to be no answer. So i will reask that. i am running "airodump-ng --essid [MyAP] -c [MyAP-Channel]" and getting no info ...
Yuki's user avatar
  • 23
0 votes
1 answer
764 views

Aireplay-ng - Deauth not working

While using this command aireplay-ng --deauth 1000 -a <router mac address> -c <user mac address> interface name After hitting enter and sending two deauths, it says write failed:Network is ...
Riyan's user avatar
  • 1
1 vote
0 answers
91 views

How to disable n or ac mode aircrack

I am unable to see clients connected to an ap when using airodump. After extensive research i have found that it’s because my adapter is using 802.11n. n mode doesn’t work when capturing, neither does ...
colby richardson's user avatar
1 vote
0 answers
268 views

airodump-ng -d returns nothing

I am using Kali Linux on VMWare Fusion on my Mac. I am able to airodump and see my router, but when I run airodump-ng -d BSSID to see devices connecting to the network, then connect my phone, nothing ...
colby richardson's user avatar
0 votes
1 answer
685 views

Airodump-ng shows AP on negative channel

I am new to WiFi and was trying to learn pentesting with the aircrack-ng suite. In the following airodump-ng excerpt, any idea why airodump-ng is showing an access point with negative value -1 as the ...
pippo1980's user avatar
  • 101
0 votes
1 answer
2k views

Airodump-ng shows AP as OPN and WPA2 at the same time. What does it mean?

The result of airodump-ng lists some AP's as both OPN and WPA2. How does the authentication work in that case? 12:34:56:78:AB:CD, 2011-09-09 15:29:47, 2022-10-21 16:09:05, 1, WPA2 OPN, CCMP, MGT, -75,...
leonardo's user avatar
-1 votes
1 answer
1k views

aircrack-ng on Raspberry pi 3 and WiFi adapter

I am just getting into ethical hacking and cybersecurity and would like some advice regarding USB Wi-Fi adapter. I am hacking on Raspberry PI 3 which is running Kali Linux. Furthermore, I have been ...
TheBestPlayer's user avatar
0 votes
0 answers
17 views

Significant differences in hash cracking speeds? [duplicate]

I'm doing an educational hash research. I generated MD5 hash using online tools and cracked it within a second using Hashcat and certain wordlist (yes, one second). Then I produced a WPA handshake ...
Mr. Engineer's user avatar
0 votes
1 answer
155 views

WEP keystream extraction

After having captured multiple packets with repeated IVs you can perform cipher1 XOR cipher2 which is the same as having cleartext1 XOR cleartext2, and performing cipher1 XOR cleartext1 gives you the ...
Emilio Rivers's user avatar
1 vote
1 answer
286 views

How to prevent the device from connecting to the original AP?

I'm running an Evil Twin attack with airgeddon. Point is that after deauth the account is going, automatically, to get reconnected to the orginal AP and not the fake one. The aireplay is likes so: ...
Wella's user avatar
  • 11
0 votes
0 answers
3k views

besside-ng "bad beacon" error when attempting to deauth (aircrack-ng)

Equipment: Alfa AWUS036ACH Wi-Fi adapter AC1200 Fresh Install of Kali Linux, fully updated (not on a VM) I have been running across this same "bad beacon" error (sometimes with "DEAUTH&...
frankfooter32's user avatar
1 vote
0 answers
304 views

Problems in stopping/restoring Aircrack session

I'm running aircrack-ng version 1.6 on Live Kali. I noticed that "recently" a -N option has been added for saving a session, which can be later resumed with the option -R. However this seems ...
kuma's user avatar
  • 119
0 votes
0 answers
219 views

Why ifconfig and airmon-ng show me a different result?

I can see encryption details and AUTH types with ifconfig but not airmon-ng. Do I need to do something about it in order to to get better results from Fake authentication attack ARP request attack ...
Shiori Fujino's user avatar
0 votes
1 answer
247 views

Aireplay handshakes, were working now has an error

I'm trying to learn to do pen testing and wifi cracking. I had captured handshakes and begun cracking the handshake a day ago, with the password not being in my dictionary list. When trying with a new ...
LeCoda's user avatar
  • 101
1 vote
0 answers
166 views

Detecting changes in surrounding WiFi networks [closed]

I’m considering developing a simple WiFi scanner and logging App that can run as a service 24 hours a day for months, passively collecting changes in the surrounding wireless environment with the ...
Gerard de Jong's user avatar
1 vote
1 answer
2k views

Access point uses different BSSID and deauth attack fails

I'm using airgeddon (https://github.com/v1s1t0r1sh3r3/airgeddon) to perform a deauthentication attack on my wifi network. When i put my wireless interface in monitor mode to scan the network from the ...
Emanuele Sabato's user avatar
4 votes
1 answer
15k views

PMKID found , but it should be WPA handshake

i was trying to get access in wifi network but i came to something that i need to ask afteraireplay-ng –0 20 –a [router bssid] –c [client bssid] wlan0mon i expect WPA handshake in right top ...
key's user avatar
  • 41
0 votes
2 answers
4k views

airodump-ng station not associated with bssid

Why do some BSSIDs show as "not associated" (note: not all of them show as such; some just show a usual BSSID). I have tried to use the other BSSID that shows up for the other station but it didn't ...
Ihab Hamed's user avatar
1 vote
1 answer
516 views

With WiFi now having protected management frames, is it still worth attempting an evil twin attack?

I was trying to aireplay'ng my home WiFi but I understood that with the new generation of APs, there is a system of protected management frames. So I'm asking, is it still worth it to perform an evil ...
Joe's user avatar
  • 29
1 vote
0 answers
1k views

I'm not able to DeAuth a Client (Aireplay-ng)

I'm trying to perform a De-authentication attack on my own network and client. However, the client never disconnects and I cannot boot the client from the AP. I'm running: aireplay-ng -0 0 -a [BSSID]...
Joe's user avatar
  • 29
-1 votes
1 answer
1k views

wifi cracking using a network adapter which doesn't support packet injection

I'm trying to crack my wifi (WPA-CCMP) password to test its strength and security, I'm using the commview for wifi and aircrack-ng software on windows 10. I've three laptops, Windows 10 (64bit) with ...
pal's user avatar
  • 3
1 vote
1 answer
1k views

802.11 data frames missing from Wireless frames capturing

By working on the Wireless QoS (WMM/802.11e), I captured with airmon-ng and airodump-ng on Kali Linux, the 802.11 raw wireless frames, on my BSSID and channel. I generate some traffic from my ...
bdes31's user avatar
  • 113
0 votes
0 answers
484 views

DeAuth not DeAuthing Client (Aireplay-ng)

I'm trying to perform a De-authentication attack on my own network and client. However, the client never disconnects and I cannot boot the client from the AP. I'm running: aireplay-ng -0 0 -a XX:XX:...
RahatTepe's user avatar
1 vote
1 answer
663 views

Unable to See Network Clients during Deauth Capture Issue

bit of a general question here, would hope to learn more about exactly what is going on technically. I'm attempting to test and capture a handshake from my own AP (an older Apple Airport router). I'...
RahatTepe's user avatar
1 vote
1 answer
3k views

How to speed up brute forcing of finding a WEP key from a captured file?

I have been working on decrypting a WEP .cap file using crunch. It has 1268 IVs. I am wondering: Can I get a clue from the captured file to speed the process of brute-forcing? If not, what other ways ...
pyDeb's user avatar
  • 45
3 votes
0 answers
5k views

Aireplay --deauth on network with multiple access points

I have successfully used the aireplay-ng --deauth attack on a network with a single access points, but when trying on a network with multiple access points (e.g. a network using Google WiFi) it doesn'...
Pvpoe's user avatar
  • 31
0 votes
0 answers
1k views

aireplay-ng --fakeauth issue with deauth packet

I am new to Kali Linux and I want to check if ethical hacking and pentesting is my cup of tea. I'm trying to associate my wireless adapter with an AP via aireplay-ng --fakeauth, but every time I use ...
aFku's user avatar
  • 1
1 vote
0 answers
275 views

Issue establishing a working AP with Airbase-ngand DNSmasq

I’m able to run airbase-ng, set DNSmasq with a customized config file that includes dhcp options 3, and 6, with the actual router IP address of the network that has internet, and added public DNS ...
Georg's user avatar
  • 11
2 votes
0 answers
3k views

Airgeddon-ng Handshake fail [closed]

I've followed the following instructions below. This is a freshly installed Parrot OS, not using VirtualBox and etc. I am also using Alfa AWUS036NHA wifi adapter. ifconfig sudo airmon-ng start wlan1 (...
loki's user avatar
  • 21
0 votes
1 answer
670 views

Is it safe to login using HTTP on a WPA2 protected home network?

I have a small network infrastructure in my home on which I'm hosting some services such as a website, file server and such. Many of those services have an administration web interface which isn't ...
pmbonneau's user avatar
  • 201
0 votes
2 answers
3k views

Will the new WPA3 protocol make it impossible to hack WIFI Password? [closed]

Like I asked in the thread title; Will the new WPA3 protocol make it impossible to hack a WIFI's password using tools like aircrack-ng?
Linux Newbie's user avatar
3 votes
2 answers
6k views

aircrack-ng issue: No mon0 when run "airmon-ng start wlan0" and "No such BSSID available"

I have read many threads on StackExchange and some other blogs but none helped me. The issue is with aircrack-ng on Kali Linux. It gives me error No such BSSID available when I run aireply-ng. I think ...
ANB's user avatar
  • 141
0 votes
1 answer
623 views

is it possible to create a WEP wifi that accepts any password?

the same as evil twin fluxion but without captive portal so the victim connects to our fake Wep Wifi that accepts any password after getting disconnected from his Wpa 2 Wifi so we sniff data from the ...
mina nageh's user avatar
1 vote
1 answer
921 views

How to get result from airdump-ng on Ubuntu 18.04 LTS?

Issue: when I run airodump-ng wlp3s0mon, no results appear. I recently installed all kali linux tools on Ubuntu 18.04 LTS from this git repo https://github.com/LionSec/katoolin My chipset is the ...
HelloWorld's user avatar
0 votes
1 answer
506 views

Can do I brutefore wifi password with handshake without wifi detection? [closed]

I have captured handshake but now I want to bruteforce wifi without detection it (in different place). Is it possible? If yes, how to do that?
Jan Radtke's user avatar
3 votes
2 answers
19k views

Airodump-ng : why are BSSID not associated?

Using airodump-ng with my wireless adapter in monitor mode, I am able to get expected scan to run. I have a few questions : Why do BSSIDs show as "not associated" (note: not all of them show as ...
taze totero's user avatar
1 vote
2 answers
29k views

I couldn't deauth any devices using aireplay-ng command in kali linux

I am using Kali linux. I've updated all tools and services by apt-get update and apt-get upgrade. I was using aircrack-ng for pentesting my wlan network. I wanted to deauth any device connected to my ...
GD777's user avatar
  • 11
1 vote
0 answers
278 views

How does fake authentication work with no other clients connected to the AP? (aireplay-ng)

I was reading a tutorial about how to hack a WEP network that has no other clients connected to the AP. It says that fake authentication must be used and it appears to work, but I don't understand how ...
Lewis Kelsey's user avatar
0 votes
3 answers
19k views

DeAuth all AP's in range

In a few days, we are going to be many friends that will gather together and play all night long using 6-7 APs. How can I DeAuth/Disconnect everyone's connection, without being connected to their ...
Sander Column's user avatar
0 votes
1 answer
3k views

Using airolib-ng with crunch and then using the file using aircrack-ng gives unexpected result

I'm using airlib-ng and crunch to generate password Database and use that Password Database in aircrack-ng to crack the Captured Handshake of a WPA2 Wireless Network. Here are my terminal Commands ...
user avatar
1 vote
0 answers
157 views

Aireplay issues

I started using the aircrack-suite and to be more specific it is about aireplay-ng. The problem ist that... aireplay-ng -0 wlan0mon ...does work, but... aireplay-ng -9 wlan0mon ...doesn't In fact ...
Ov3rfl0w's user avatar
3 votes
1 answer
961 views

What are the factors making a WPA2 handshake suitable for cracking?

Days ago I was dumping handshakes of my APs using airodump-ng. I would later use aircrack-ng to crack them using wordlists which would purposely contain the passphrases. However, I noticed that some ...
cablewelo2ma's user avatar
1 vote
1 answer
6k views

How to continue your Aircrack-ng Bruteforce where you left off? [closed]

I am performing a WPA/WPA2-PSK Attack using Aircrack-ng. The Wordlist i am using is 100 GB but i have to Shutdown my PC after a certain time so how am i supposed to continue the Attack where i left ...
Speci's user avatar
  • 113
0 votes
1 answer
3k views

Is it possible to "deauth" wifi direct connections?

I used a Samsung Galaxy s7 as a Wifi Direct device to another android device (I think a Moto G Play) and I was wondering whether aircrack-ng could deauthenticate/disrupt the connection between them. ...
Kenneth Chen's user avatar
1 vote
2 answers
996 views

Is there a way to tell, when looking at a packet, that an aircrack-ng attack happened?

I'm trying to understand how to find these attacks when using a packet sniffer (specifically using Omnipeek). Is there a way to look at a packet and know that this type attack happened? I want to find ...
LuckyOats's user avatar
2 votes
0 answers
346 views

Duplicate packets in packet injection

I've been trying to develop a few scripts that can forge custom 802.11 frames and inject them through a monitor mode interface. I have gone through the development documentation of radiotap headers ...
user148898's user avatar