Embedded Files
Reconnaissance - Wireless Recon
Airodump-ng is a staple Wi-Fi reconnaissance tool that makes use of the network adapter's monitor mode. Similar to a wired adapter's promiscuous mode, monitor mode allows for the capture of all wireless frames regardless of destination address.
Commonly it's used to test for multiple cases such as:
Signal Leakage - the wireless signal extends behind the property, allowing for unintended access by unauthorized people.
Handshake Capture - In pursuit of the wifi password, penetration tester's will perform a DeAuth attack to forcefully disconnect users from the AP, as the device reconnects it goes through a handshake process that can be captured and processed offline.
Device Tracking - As shown in the last screenshot below airodump will also display the MAC addresses of nearby devices and what station they are connected to. This could be used to build a topology map of the wireless network.Â
To begin using airodump-ng the adapter must be set to monitor mode. Traditionally this is done using airmon-ng.
To confirm the adapter is in monitor mode I use ifconfig.
Now airodump-ng is listening to all frames within range and display the associated devices.
Notice how airodump-ng is matching the devices with their respective station.
Page updated
Google Sites
Report abuse