Monitoring

View Frequency of Wireless Adapter

iwlist wlxc4e984103ac8 frequency

View Nearby Access Points

sudo iw dev wlxc4e984103ac8 scan | grep SSID
airodump-ng --wps -w airodump_sweep_results wlan0mon

wash -a -i wlan0mon

Set interface to Monitoring Mode:

airmon-ng start wlan0

ifconfig wlan0 down && iwconfig wlan0 mode monitor && ifconfig wlan0 up

Set interface to monitoring mode on a specified channel:

airmon-ng start wlan0 8

iwconfig wlan0 channel 8

[Optional] Kill services that might interfere with wireless network interfaces in monitor mode:

airmon-ng check kill

Set interface back to managed mode

airmon-ng stop wlan0mon

ifconfig wlan0 down && iwconfig wlan0 mode managed && ifconfig wlan0 up

Monitor a WiFi network to capture handshakes/requests

airodump-ng wlan0mon --channel 8 -w airodump_essid_results --essid essid --bssid FF:FF:FF:FF:FF:FF

Create Virtual Access Point (VAP) named mon0

iw dev wlan0 interface add mon0 type monitor
ifconfig mon0 up
iwconfig mon0

Verify using TCPdump for traffic on VAP

 tcpdump -i mon0 -s 65000 -p

Delete VAP

iw dev mon0 interface del

Last updated