Hello guys and welcome to the first chapter of this
course, Wi-Fi adapters, are use for connecting your device to the internet.
Most laptops, tablets and mobile phones have a built-In Wi-fi card.
In Wireless environment data is transferred from the device to the
Internet in the form of Packets that send in a request from packet to Router.
Rather fetches the requested packet from
the Internet and once it obtains the Web page.
It sends information back to your device in the form of packets its course, thereby
controlling all the traffic, going to connect to Ios
monitor mode allows you to read all the packets of data, even if they are not send
through this mode and controls the traffic received on wireless only network.
Once the remote is able to capture all the packets, which are not only directed to
your device, but also to other devices connected to this network.
The network Hacker want to know the remote is used to capture all relevant
data packets to check whether the Router is vulnerable.
It can also be used to check whether the network is vulnerable to any attacks.
So multimode provides all the crucial
information on every device and can also be used for observing large volumes of
Network Card that this video will provide an overview of multimode in linux.
follow along, you will need the computer capable of running Wireshark and put in
your Wi-fi network adapter into monitor mode.
You can do so on Kali Linux or any Debian based Linux computer,
as well as in a virtual machine, or goondas device.
You will also need an external Wi-fi
network adapter that's capable of being put into monitor mode.
If you don't have one, if you don't have
or if you don't want to use your default builtin Wi-Fi network adapter.
Get started
like in your wireless network adapter to your Kali or Debian based system,
then identify its name by running the command Ifconfig in terminal window.
So as you can see, since that
typed Ifconfig competing and presented with information about all the network
interfaces that are attached to my computer.
For the wireless network adapters, I have
to the default built in one that is called W LAN zero and the external
Wi-fi adapter that I'm going to use for this video that is called W LAN WAN.
Now, you should see your card name,
something similar like W LAN, WAN or LAN zero.
And if it doesn't automatically appear, if you type Ifconfig,
then you can type IP space a to see if it's attached, but not yet up.
So if it's not yet, but at least you can
run the command ifconfig space, the name of your
wireless network interface and then space up to bring your card up.
Since you type this command now it should appear and be visible.
In your terminal.
And note here, some systems would use a different name for the Wi-fi interface,
like Wulp5s0 and so on, instead of the default w LAN zero, that is fine.
Just replace any command that has w LAN WAN in my case
that I'm going to use with whatever your system calls the wi fi interface.
So there is a couple of ways to set your
wireless network adapter into monitor mode.
The first is the second wireless network
interfaces in that computer by typing iwconfig.
And we are presented with all the
information about our wireless network interfaces, and as you
can see, both of our wireless network interfaces are managed.
As I said, I am going to use W LAN, WAN and set it into monitor mode so
we can just go ahead and first bring the interface down.
But type ifconfig W LAN WAN down
after that, we are going to use the i
wconfig command to set our wireless network interface into monitor mode.
If sometimes the with the first command,
when you're trying to bring interface down, it doesn't fully imply
so to just do it one more time, you know, it took some time until our next.
Line up so we can just go ahead and set it
on the monitor mode now and now, we don't have any errors or.
Or warnings, now its fine, then
the next step is that we have to bring our interface up again.
We can be fully functional or on monitor mode.
By typing Ifconfig w LAN WAN.
Up since you hit enter
your network interface should be up and running and monitor mode.
So let's just check this one by typing iwconfig.
Now you can see that our
W LAN WAN wireless network interface is being said,
is being set to monitor mode and you can see it here.
To return the interface to normal minus
mode, you can follow the same procedure
ifconfig w LAN down.
Running, running twice in some cases, like
in my case, does it go with the first command, first time typing the command.
Now we have to use iwconfig like we said earlier.
WLAN1 and then mode space managed.
Then we can bring our interface back up
again to our normal routine, normal minus Mode.
It is just that's, the case
and we can see that our Wlan1 is back to manage mode.
So there is another command that we can use, which is the airmon-ng.
So if you don't have that in your
Linux distribution, then just go ahead and install it first before we code in.
So if you don't have it, you can just go ahead and type apt dash get
space install space aircrack-ng and
can just go ahead and press enter and this
will install the air mode dash ng, the next thing we can do is we need to use
airmon-ng in order to check for any processes that
will interfere with our network interface being set to multimode.
So.
This can be done with the following command.
airmon-ng space check
hit enter, and then we are presented with the four processes that they are running
in our current linux that can cause trouble.
So, as has been indicated here,
need to kill them before putting the cart into monitor mode, because this will
sometimes boot our interface back into minus mode.
And we don't want that we are capturing some packets.
So you can just go ahead and
type airmon dash ng check kill and then the
Processor ID and you can kill them all first and then we can continue
setting our wireless network interface into monitor mode.
So now that we killed all the processes that could cause trouble in our
monitor mode, let's just put the interface into monitor mode.
By typing airmon-mg start wlan1.
So you can see.
Now here that our Wlan1 interface
is being set to monitor mode, as you can see, it's enabled here and.
Now we can start taking the traffic.
So now, as you can see that the.
They can't change the name to Wlan1 to its monitor mode,
and we can start listening on Wi-fi traffic by running the command.
Airodump-ng space wlan1mon since wlan1
is a monitor mode that we can just go ahead and hit enter.
And now, as you can see, we see a list of nearby Wi-fi networks that we can target.
We also have the tunnels here.
So let's just go ahead and this is our
channel and Wi-fi and lets go ahead and stop the capture and.
Now, stop the capture and.
We can determine the channel and the network we want to track,
as we said, we are going to track our domestic network on this channel, so.
We can just go ahead and type.
airodump-ng space wlan1mon
space dash c for.
The channel, so we going to use the flag
dash hash we start listening to that channel.
So, as we said, we are going to choose
Channel 11 and then we can go ahead and press enter.
This will showcase the airodumbed-ng dash
11, and now it's time to start the Wireshark.
So we have so we have open Wireshark here
and we can see the Wlan1mon, we can select this
one monitor mode interface that we have just set up and we
can just go ahead here and start capturing the packets.
As you can see, we can
we can actually see all the traffic going through our wireless network.
Normally, you should see a lot of packets being in this by Wireshark.
And whenever you feel ready, you can go ahead and stop the capture.
And you can save this capture if the name of your desired.
I hope you have enjoyed this video and now
you can just go ahead and click on the next video.
Where you are going to learn how to filter by Port and IP by Wireshark.