Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.
15 votes
Accepted

Turn RPi3 Wi-Fi adapter into monitor mode using airmon-ng

You cannot. Not all chipsets/wifi drivers support monitor mode. Broadcom is known for lacking in open source drivers functionality support. It is already public knowledge the RPi 3 current driver ...
user avatar
8 votes

Does aircrack-ng use GPU/CUDA capabilities?

As stated by @RoyceWilliams, it does not seem to use CUDA. For this purpose, you might want to look at Pyrit, since it leverages CPUs and GPUs on the cracking process. NB: I wanted to leave this as ...
user avatar
  • 261
7 votes
Accepted

No handshake recorded from airodump-ng

Use a wireless sniffer or protocol analyzer (WireShark or airmon-ng) to capture wireless packets. Sniffing this way is similar to how attackers sniff wired networks to eavesdrop and capture ...
user avatar
7 votes

Why use a USB WiFi adapter with Aircrack-ng?

The main reason is because you need the adapter to support monitoring mode. This mode allows the adapter to not only sniff all packets coming from the AP to the clients but also from sniff the data ...
user avatar
6 votes

Turn RPi3 Wi-Fi adapter into monitor mode using airmon-ng

The default firmware does not allow monitor mode. The Nexmon project has patches to enable that.
user avatar
  • 161
6 votes
Accepted

Does aircrack-ng use GPU/CUDA capabilities?

I don't think so. There's only one mention of OpenCL or CUDA in the source code, and it appears to be a leftover from code copied from John the Ripper. Edited to answer your implicit question: if you ...
user avatar
6 votes

WPS cracking using reaver-bully on Kali Linux

I have a couple of recommendations for you. First of all. If I'm not wrong, both of your Alfa's are Ralink chipset based. You must know that Ralink chipsets and reaver have an awful results. It's ...
user avatar
5 votes
Accepted

Deauth all users on AP except yourself

A rather quick Google search for "python wifi deauth" reveals several results for your question. WiFi Jammer seems to do the job: Continuously jam all wifi clients and access points within range. ...
user avatar
  • 5,773
5 votes
Accepted

Aircrack-ng: Why deauth works

AP accepts packets from a machine not connected to it from arbitrary senders Normally, deauthentication [and other management] frames don't have to be encrypted (i.e. require an existing ...
user avatar
5 votes
Accepted

How Aircrack reliable is for decrypting password? other alternative?

Yes, you have other alternatives. Aircrack only support dictionary and bruteforce attacks but you can convert the file into other format to be used with another tool. I can recommend to you to use ...
user avatar
5 votes
Accepted

Does turning off output make aircrack-ng work faster?

I tried aircrack-ng on a dictionary with 2,000,000 keys and none of these keys is the correct password. So aircrack-ng had to go through all of those 2,000,000 passwords. Handshake was WPA encrypted, ...
user avatar
  • 606
5 votes
Accepted

How to continue your Aircrack-ng Bruteforce where you left off?

Unfortunately, the answer is that currently, aircrack-ng does not support such a feature. However, you could achieve the same result with john (John The Ripper) in combination with aircrack. To ...
user avatar
  • 2,339
4 votes

What is airodump-ng able to detect?

My guess is that your visitor is owning a Windows Phone. A windows phone does not announce what SSID networks it is looking for, but instead, it will wait for an access-point to announce its presence ...
user avatar
4 votes
Accepted

Airodump-ng -1 DB networks

These are hidden stations. The reason there are some information missing is that these accesspoints don't send beacon packets. Beacon packets are packets that contain information about the network ...
user avatar
  • 4,275
4 votes
Accepted

How can I make wordlist smaller size?

Well, technically if you put fewer words in your word list it will get smaller but the chances of it being of any use are reduced. If storage is your main concern you could use the following approach: ...
user avatar
  • 1,391
4 votes
Accepted

List wireless stations around me

The solution for grepping airodump for specific mac: airodump-ng mon0 2>&1 | grep "de:ad:be:ef:de:ad" Thanks Kolanich. airodump prints to stderr, which had to be redirected to stdout to be ...
user avatar
4 votes

Aircrack-ng does not have cuda implementation. Are there alternatives?

Theres a fork of aircrack using cuda. Check it out here Alternatively the following listed supports CUDA password cracking too. John the ripper hashcat You may want to consider the other specific ...
user avatar
  • 1,273
3 votes

Monitor traffic that is going through my router

You said you wanted to monitor the HTTP traffic. Not all network traffic (e.g., DNS, SSH, etc.). You didn't say whether it was passive or active monitoring. You haven't stated whether the systems ...
user avatar
  • 401
3 votes

How can I make wordlist smaller size?

I dont think aircrack-ng is compatible with this but even it where and you got a compression that shrinks the file down to onle 5PB you could impossibly store it on a usual hdd. A possible solution ...
user avatar
  • 4,275
3 votes

WPA/WPA2 Handshake -- A question on the computation of the MIC

The ANonce that is sent in the first message is indeed not protected. It is randomly chosen by the AP, and is sent in clear-text. The MIC in the second message only protects the SNonce, and thus ...
user avatar
  • 5,353
3 votes
Accepted

Arp replay for cracking WEP key IN Aircrack-ng

WEP CRACKING Weak IVs : Weak Ivs are ivs which reveal information about the wep key itself RC4 in its implementation in WEP has been found to have weak keys. Having a weak key means that there is ...
user avatar
3 votes
Accepted

Scan for Vulnerabilities Without Network Connection

In addition to the existing response: You can mount indirect attacks where you use another device which has access to both the (external) attacker and to the internal target device. A common available ...
user avatar
3 votes
Accepted

Cant access most websites using a fake AP created by aircrack-ng suite

After some comments, you are on the road... now you must locate exactly your problem. To launch sslstrip I can recommend you this nomenclature: sslstrip -f -p -k -l 10000 -l to listen on port. so ...
user avatar
3 votes
Accepted

How deauth attack works in mkd3

mdk3 is not included in aircrack-ng suite at the moment, but it seems they started to collaborate some time ago. Look at this: https://svn.mdk3.aircrack-ng.org/mdk3/docs/Documentation_incomplete.html ...
user avatar
3 votes

Handshake not recording

Handshakes are different for WEP networks. The handshake you expect to capture is the "four way handshake" and that is only existing on WPA and WPA2 networks. On WEP networks the handshake is ...
user avatar
3 votes

Does aircrack-ng use GPU/CUDA capabilities?

There used to be a CUDA version of aircrack-ng but since oclhashcat became popular, you will need to build from the source to enable the CUDA feature in aircrack-ng. There is little documentation ...
user avatar
  • 141
3 votes

Does aircrack-ng use GPU/CUDA capabilities?

Since I don't have enough "reputation" I cannot comment, but as Aero Wang's answer, you need to download cuda lib and recompile aircrack, I did this many years ago trying on a Nvidia Quattro, the ...
user avatar
3 votes
Accepted

Is it possible to hack a SSID without actually having to sniff or send deauth frames to a host?

If the network is WPA2 as you sais in comments, this is what you can do: You didn't specify if there is WPS enabled or not. So check that using wash (included on reaver package) or using --wps on ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible