Common Aircrack-ng Commands
1. Capture Packets
This command captures packets from a specified wireless interface and saves them in a spesific file.
airodump-ng <interface>
2. Crack WEP Key
This command cracks a WEP key using the captured packets. Cryptographic attacks can be used to reveal the real password.
aircrack-ng -b <BSSID> <capture_file>
3. Crack WPA/WPA2-PSK Key
This command cracks a WPA/WPA2-PSK key using a wordlist and the captured handshake. It attempts to match the captured password key with possible passphrases from the wordlist.
aircrack-ng -w <wordlist> -b <BSSID> <capture_file>
4. Monitor Mode
This command enables monitor mode on a specified wireless interface connection. Monitor mode is required to be able to read and display all packets on the wireless link.
airmon-ng start <interface>
5. Deauthenticate Clients
This command deauthenticates clients of an access point to capture the handshake; in other words, it forcibly kicks clients off the system. So that they will try and reconnect their connection, hence giving you a chance to capture the handshake and entering the system.
aireplay-ng --deauth <count> -a <BSSID> -c <client_MAC> <interface>
6. Fake Authentication
This command provides fake authentication to an access point. It assists in associating with an access point without knowing a valid password; many times, it is a prerequisite to further attacks.
aireplay-ng -1 0 -e <ESSID> -a <BSSID> -h <MAC_address> <interface>
7. ARP Request Replay
This command performs an ARP(The Address Resolution Protocol) request replay attack to generate traffic. This traffic makes the process of cracking WEB keys easier and faster. This makes the Aircrack -ng tool more functional.
aireplay-ng -3 -b <BSSID> -h <MAC_address> <interface>
8. Packet Injection Test
This command tests packet injection capabilities of the wireless interface. Successful packet injection is critical for network conneciton attacks.
aireplay-ng -9 <interface>
9. Stop Monitor Mode
This turns off monitor mode on any wireless interface. Returns the interface to managed mode, returning it to normal networking. It's sort of the final stage of the attack. The programme stops running.
airmon-ng stop <interface>
10. Help and Usage Information
This command displays the help menu and usage information for Aircrack-ng. It provides an overview of available options and command syntax.
aircrack-ng -h