If you do not specify the ‘-c’ option in the above command, aireplay-ng will force every device on that Wireless router (AP) to disconnect by sending fake deauthentication packets. This WPA handshake can be cracked by Aircrack-ng later on. This deauthentication attack will force the specified client to disconnect and then reconnect again to capture the WPA handshake. c : MAC address of victim (if not specified, it will deauthenticate all the clients connected to the given AP)Īs you can see, we have successfully deauthenticated the system with the given MAC address that was connected just a moment before. You can do this simply by running an injection test using the following sudo aireplay-ng -0 1 -a E4:6F: 13:04:CE: 31 -c cc: 79:cf:d6:ac:fc wlan0ġ : Number of deauthentication packets to send The first thing to do before performing an attack is to check whether your network card supports injection.

Other types of attacks are included in the following list:Ĭertain network cards do not support packet injection, and aireplay-ng only works with network cards that support this feature. There are several different types of powerful attacks that can be performed using aireplay-ng, such as the deauthentication attack, which helps in capturing WPA handshake data, or the fake authentication attack, in which packets are injected into the network access point by authenticating to it to create and capture new IVs. The main purpose of aireplay-ng is to inject frames. It can be used along with aircrack-ng to crack WEP and WPA keys. Aireplay-ng is used to generate rogue Wireless traffic.

Packet capture tool aircrack