Once we have captured the handshake, we can stop Airodump-Ng and Aireplay-Ng. If you want to keep on sending de-authentication packets to the Wi-Fi network, you can put the number '0' after the -deauth command. This command will then start to send de-authentication packets to the Wi-Fi network. The -write command has to be used or else the handshake will not be saved and you will not be able to crack it. We will then be able to capture a 4-Way-Handshake that we will be cracking. Once Airodump-Ng is sniffing on that network, we will run Aireplay-Ng to de-authenticate the users on the network to force them to reconnect again. The command to do that is:Īirodump-ng -write -bssid -channel wlan0mon Now that we have most of the 2Ghz networks on our list, we will run Airodump-Ng on a particular network. However, I am unable to make Aireplay-Ng send de-authentication signals to a 5Ghz network: Any Suggestions On This? HoweverĪfter recognising the Wi-Fi network you are attacking, you can stop this general scan and start running Airodump-Ng on a particular network. Airodump-Ng scans 2.4Ghz networks by default. The additional -band a command tells Airodump-Ng to scan 5Ghz networks only, as 5Ghz networks use 802.11a, while 2.4Ghz networks use 802.11b. To find networks running on 5Ghz, you can run the command with an additional add-on:

Aircrack-ng wpa2 wordlist