Wireless Mode: Monitor / Packet Sniffing

The following is taking place in Kali Linux terminal:

--enable monitor mode on your wireless adapter

#ifconfig wlan0 down

--kill all processes that might interfere
#airmon-ng check kill
--!!or avoid airmon-ng check kill (which can't be reversed until rebooting) use  the following method to be able to restore NetworkManager:

#pgrep NetworkManager
--you will get a PID number

--kill NetworkManager
#kill <PID number>

#pgrep wpa_supplicant
--you will get another PID number

#kill <PID number>
--this will kill wpa_supplicant

--test this by running airodump-ng
#airodump-ng

--when you want to restore wireless functionality:
#service NetworkManager restart
#service wpa_supplicant restart

--you can test for full functionality by trying to connect to a network you never associated with before

--source: https://forums.kali.org/showthread.php?28932-Avoiding-Airmon-ng-Check-Kill-and-restarting-NetworkManager


#iwconfig wlan0 mode monitor

#ifconfig wlan0 up

#iwconfig


--Sniff Packets

--scan 2.4g
#airodump-ng <device>

-- scan 5g
#airodump-ng --band a wlan0

-scan 2.4g/5g
#airodump-ng --band abg wlan0

--log to file targeted device packets
--airodump-ng --bssid <MAC address> --channel <channel> --write <filename> < yourwireless adapter>

# airodump-ng --bssid mac --channel 6 --write test wlan0

--open in wireshark

# wireshark

--open <filename>.cap

Changing your MAC address

The following takes place in Kali Linux Terminal:

To change your MAC address:

--ifconfig <device> down

# ifconfig wlan0 down

--ifconfig <device> hw ether <new mac adress>

# ifconfig wlan0 hw ether 00:1d:2d:3d:4d:5d

--ifconfig <device> up

# ifconfig wlan0 up


--In Kali, if your MAC address keeps resetting back to the original, you will need to edit the NetworkManager.conf file.


# leafpad /etc/NetworkManager/NetworkManager.conf

--In the file add the following lines:

[device]
wifi.scan-rand-mac-address=no

[connection]
ethernet.cloned-mac-address=preserve wifi.cloned-mac-address=preserve


--then, ctrl-s / save

-- restart network manager

# service network-manager restart