aircrack-ng¶
Wi-Fi security auditing suite — capture, analysis and key recovery
- Version recorded: 1.7
- Categories:
wifi - Upstream: https://www.aircrack-ng.org/
What it does¶
A suite for auditing 802.11 networks: putting an adapter into monitor mode, capturing frames, and recovering WEP and WPA-PSK keys from captured handshakes offline.
Why you would want it¶
It is the reference toolkit for wireless auditing and the one every piece of existing documentation assumes. The capture side is also generally useful for understanding what is on the air around you, independent of any key recovery.
Before it will work¶
An adapter whose driver supports monitor mode and, for some tools, packet injection. Not every chipset does, and this is the single most common cause of 'it does not work'. airmon-ng will report which processes conflict.
How it installs¶
- apt:
aircrack-ng
Known problems¶
NetworkManager and wpa_supplicant fight over an interface put into monitor mode; airmon-ng check kill is the usual answer, and it will drop your network connection. Key recovery against WPA depends on capturing a handshake, which requires a client to associate while you are listening.
Keeping it current¶
- probe: apt policy
- strategy: apt_upgrade