Kali‐RPI Wifi - jhu-information-security-institute/NwSec GitHub Wiki

Radio survey and radio details for SSID target

  1. Determine radio supported bands/channels
    $ iw phy
    
  2. See what ESSIDs are available
    $ sudo iwlist wlan0 scan | grep "ESSID:" | sort | sort -n
    
  3. Get information for SSID of interest (e.g., JHUISI_NSPUBLIC_OPEN)
    $ sudo iw dev wlan0 scan ssid <SSID>
    

Monitor mode vs managed mode

Monitor mode allows a network device to intercept and read network packets, unmodified. In monitor mode, 802.11 management or control packets are available and 802.11 packet headers are NOT "translated" by network drivers.

Switch to monitor mode

Note: you will need to reboot the raspberry pi when you are finished so that it returns to normal managed mode for wlan0!

  1. First, kill services problematic to monitor mode
    $ sudo airmon-ng check kill
    $ sudo systemctl stop NetworkManager
    
  2. Switch radio to channel identified above
    $ sudo airmon-ng start wlan0 <CHANNEL>
    
  3. Confirm radio settings
    $ iwconfig wlan0mon
    

Switch back to managed mode

Reboot the RPI to restore it back to normal, managed wifi mode.

⚠️ **GitHub.com Fallback** ⚠️