set wireless interface to monitor mode

You can use the following command to set wireless interface to Monitor mode and Managed mode on any Linux distro. The only requirement is availability wireless adapter that supports monitor mode. This one is recommended.

1. How to enable monitor mode using iw

You should check whether the operating system is able to recognize your Wi-Fi card. In addition, you need to know the name of the wireless interface.
Get to know the wireless interface name:
1
sudo iw dev
Output:
1
2
3
4
5
6
7
phy#0
    Interface wlan0
        ifindex 3
        wdev 0x1
        addr 3a:c9:39:0d:fc:1a
        type managed
        txpower 20.00 dBm
As you can see, the name of my wireless interface is wlan0. In addition, you can see that it is in managed mode.
To set wireless interface to Monitor mode with iw you can use the following command sequence:
1
2
3
sudo ip link set IFACE down
sudo iw IFACE set monitor control
sudo ip link set IFACE up
Where IFACE replace with actual name of your wireless interface. In may example:
1
2
3
sudo ip link set wlan0 down
sudo iw wlan0 set monitor control
sudo ip link set wlan0 up
Then check the status of you wireless interface one more time:
1
2
3
4
5
6
7
8
9
sudo iw dev
phy#0
    Interface wlan0
        ifindex 3
        wdev 0x1
        addr 16:30:78:80:a3:26
        type monitor
        channel 1 (2412 MHz), width: 20 MHz (no HT), center1: 2412 MHz
        txpower 20.00 dBm
As you can see, now type monitor. Note: the name of interface is not changed by this method.
To return wireless interface in Managed mode with iw you can use the following command sequence:
1
2
3
sudo ip link set IFACE down
sudo iw IFACE set type managed
sudo ip link set IFACE up
Where IFACE replace with actual name of your wireless interface. In may example:
1
2
3
sudo ip link set wlan0 down
sudo iw wlan0 set type managed
sudo ip link set wlan0 up

2. How to enable monitor mode using Airmon-ng

Again, we should get information about our wireless interface:
1
sudo airmon-ng
Output:
1
2
3
PHY Interface   Driver      Chipset
 
phy0    wlan0       rt2800usb   Ralink Technology, Corp. RT3572
The name of interface is wlan0.
Checking for interfering processes
Before putting a card into monitor mode, it will automatically check for interfering processes. It can also be done manually by running the following command:
1
sudo airmon-ng check
This command stops network managers then kill interfering processes left:
1
sudo airmon-ng check kill
At last, we start monitor mode:
1
2
3
4
5
6
7
8
9
sudo airmon-ng start wlan0
 
 
PHY Interface   Driver      Chipset
 
phy0    wlan0       rt2800usb   Ralink Technology, Corp. RT3572
 
        (mac80211 monitor mode vif enabled for [phy0]wlan0 on [phy0]wlan0mon)
        (mac80211 station mode vif disabled for [phy0]wlan0)
As you can see, it created a monitor mode interface called wlan0mon.
1
2
3
4
5
6
7
8
sudo iwconfig
wlan0mon  IEEE 802.11  Mode:Monitor  Frequency:2.457 GHz  Tx-Power=20 dBm  
          Retry short limit:7   RTS thr:off   Fragment thr:off
          Power Management:off
           
lo        no wireless extensions.
 
eth0      no wireless extensions.
Disable monitor mode
1
2
3
4
5
6
7
8
9
sudo airmon-ng stop wlan0mon
 
PHY Interface   Driver      Chipset
 
phy0    wlan0mon    rt2800usb   Ralink Technology, Corp. RT3572
 
        (mac80211 station mode vif enabled on [phy0]wlan0)
 
        (mac80211 monitor mode vif disabled for [phy0]wlan0mon)
Don't forget to restart the Network Manager. It is usually done with the following command:
1
sudo systemctl start NetworkManager

3. How to enable monitor mode using iwconfig

As usual, start from checking interface name:
1
2
3
4
5
6
7
8
9
10
sudo iwconfig
lo        no wireless extensions.
 
eth0      no wireless extensions.
 
wlan0     IEEE 802.11  ESSID:off/any 
          Mode:Managed  Access Point: Not-Associated   Tx-Power=20 dBm  
          Retry short limit:7   RTS thr:off   Fragment thr:off
          Encryption key:off
          Power Management:off
The network interface with wireless extension is called wlan0.
Enable monitor mode:
1
2
3
sudo ifconfig IFACE down
sudo iwconfig IFACE mode monitor
sudo ifconfig IFACE up
Actual example:
1
2
3
sudo ifconfig wlan0 down
sudo iwconfig wlan0 mode monitor
sudo ifconfig wlan0 up
Disable monitor mode:
1
2
3
sudo ifconfig wlan0 down
sudo iwconfig wlan0 mode managed
sudo ifconfig wlan0 up

NetworkManager prevents monitor mode

If NetworkManager restarts automatically after each kill, and it pretends monitor mode, you can stop it manually:
In Kali Linux, BlackArch, Ubuntu, Linux Mint:
1
sudo systemctl stop NetworkManager
Note: when you stop NetworkManager, your Internet access disappears!

Comentarios

Publicar un comentario

Entradas populares de este blog

crear tftp en linux

Imagen
Installing and Configuring TFTP Server on Ubuntu 5 months ago by  Shahriar Shovon TFTP (Trivial File Transfer Protocol) is a simplified version of FTP (File Transfer Protocol). It was designed to be easy and simple. TFTP leaves out many authentication features of FTP and it runs on UDP port 69. As it is very lightweight, it is still used for different purposes. TFTP is used in places where you don’t need much security. Instead, you need a way to easily upload files to and download files from the server. CISCO devices use TFTP protocol to store configuration files and CISCO IOS images for backup purposes. The network boot protocols such as BOOTP, PXE etc uses TFTP to boot operating systems over the network. Thin clients also use TFTP protocol for booting operating systems. Many electronics circuit boards, microprocessors also use TFTP to download firmware into the chip. Overall, TFTP has many uses even today. In this article, I am going to show you how to install and conf
Leer más

instalar .bundle en linux

En primer lugar  abrimos una ventana de terminal y asignamos privilegios de root con el comando sudo su . Ahora  nos ubicamos en la carpeta donde hemos descargado el archivo de instalación  gracias al comando CD, en mi caso sería así: cd /home/maxi/Descargas/ Cuando ya estamos en la carpeta y tenemos localizado el archivo vamos a proceder a  aplicar permisos de ejecución sobre el mismo . Para ello escribimos; chmod 777 nombrearchivo.bundle chmod +X nombrearchivo.bundle Ahora solo nos queda  ejecutar el programa de instalación , para ello escribimos en el terminal lo siguiente: ./archivo.bundle
Leer más

CHMOD +x , 755 , explicacion

Explanation: Firstly you should know that: +  means add this permission to the other permissions that the file already has. =  means ignore all permissions, set them exactly as I provide. So all of the "read, write, execute, sticky bit, suid and guid" will be ignored and only the ones provided will be set. read = 4, write = 2, execute = 1 Here is the binary logic behind it (if you're interested): Symbolic: r-- -w- --x | 421 Binary: 100 010 001 | ------- Decimal: 4 2 1 | 000 = 0 | 001 = 1 Symbolic: rwx r-x r-x | 010 = 2 Binary: 111 101 101 | 011 = 3 Decimal: 7 5 5 | 100 = 4 / / / | 101 = 5 Owner ---/ / / | 110 = 6 Group ------/ / | 111 = 7 Others ---------/ | Binary to Octal chart Using  +x  you are telling to add ( + ) the executable bit ( x ) to the owner, group and others. it's equal to  ugo+x  or  u+x,g+x,o+x When you don't specify
Leer más