Since we are trying to do something 'out of the ordinary' here (e.g. In general, NICs do not use this mode, as they do not need to read packets that are not addressed to them. To be able to capture and inject packets, it is neccessary to put the network interface card (NIC) of the machine running the aircrack-ng program suite into so called 'promiscuous mode'. Run aircrack-ng to crack the pre-shared key using the authentication handshakeīefore we start, there is one thing more that needs to be addressed. Use aireplay-ng to deauthenticate the wireless clientĤ.

Start airodump-ng on AP channel with filter for bssid to collect authentication handshakeģ. Start the wireless interface in monitor mode on the specific AP channelĢ. Doing so is illegal and can result in criminal charges. The guide itself was summarized from official documentation and tested in my home network.ĭisclaimer: The following guide must not be used on networks without permission. We need all of this to fill out the necessary portions of the following commands. MAC address of wireless client using WPA/WPA2īSSID (MAC address of victim access point) MAC address of machine running aircrack-ng suite If you want to learn more about the inner workings of aicrack-ng's WPA/WPA2 PSK cracking, you can read more on the section about Password Cracking.īefore we get down to the nitty-gritty, there is some information that has to be known to be able to 'get cracking'. You will only need a few specific programs and options for cracking WPA/WPA2 PSK, which are explained in the following sections. Just type sudo aircrack-ng in the shell to get an overview of available options. On the image that was used (Kali Linux 2020.4 64bit for VMware by Offensive Security), the aicrack-ng program suite is already preinstalled. If you want to install aircrack-ng from source, click here to access the official documentation. The used client software was VMware Workstation Pro 16.1.0 build-17198959 and the used host system was Windows 10 Home Edition (64 bit). Results are based on tests that were run on the Kali Linux custom image for VMware (Kali Linux 2020.4 64bit) wich is maintained and provided by Offensive Security.

The guide is meant for usage on *NIX systems capable of installing and running aircrack-ng. This documentation is a step-by-step guide explaining how to use the aircrack-ng program suite to crack passwords of Wireless Access Points using WPA or WPA2. 3.1 How to use aircrack-ng for cracking.

How to use aircrack on kali