我使用的是 MacBook Pro 2018,并使用以下方式安装了 AWUS036ACH Wifi 驱动程序:
apt-get update
apt-get install realtek-rtl88xxau--dkms
我再次运行操作系统并重新连接我的设备(由于 Thunderbolt 插座,我使用 USB 集线器)并运行了一系列测试。
它似乎工作了一秒钟,进行了注射,然后灯灭了,此后就停止工作了。
我看到它仍然处于连接状态,但似乎不再注入数据包。
root@kali:~# iwconfig
wlan0 IEEE 802.11 ESSID:off/any
Mode:Managed Access Point: Not-Associated Tx-Power=18 dBm
Retry short limit:7 RTS thr:off Fragment thr:off
Encryption key:off
Power Management:off
lo no wireless extensions.
eth0 no wireless extensions.
root@kali:~# airmon-ng check kill
Killing these processes:
PID Name
706 wpa_supplicant
root@kali:~# airmon-ng start wlan0
PHY Interface Driver Chipset
phy0 wlan0 88XXau Realtek Semiconductor Corp. RTL8812AU 802.11a/b/g/n/ac WLAN Adapter
(monitor mode enabled)
root@kali:~# iwconfig
wlan0 IEEE 802.11 Mode:Monitor Frequency:2.457 GHz Tx-Power=18 dBm
Retry short limit:7 RTS thr:off Fragment thr:off
Power Management:off
lo no wireless extensions.
eth0 no wireless extensions.
root@kali:~# aireplay-ng -9 wlan0
19:25:43 Trying broadcast probe requests...
19:25:44 Injection is working!
19:25:45 Found 1 AP
19:25:45 Trying directed probe requests...
19:25:45 A0:04:60:1E:42:B3 - channel: 9 - 'SLOWWOLFJACK'
19:25:46 Ping (min/avg/max): 1.777ms/6.663ms/22.185ms Power: -40.46
19:25:46 26/30: 86%
root@kali:~# airodump-ng wlan CH 13 ][ Elapsed: 6 s ][ 2019-03-02 19:26
BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID
CH 12 ][ Elapsed: 1 min ][ 2019-03-02 19:27
BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSIDAR21
A0:04:60:1E:42:B3 -41 64 17 0 9 720 WPA2 CCMP PSK SLOWWOLFJACK
CC:40:D0:7F:D0:C2 -44 102 104 0 4 195 WPA2 CCMP PSK NETGEAR21
BSSID STATION PWR Rate Lost Frames Probe
(not associated) 30:8C:FB:05:9E:F6 -33 0 - 1 0 4 NETGEAR21
(not associated) 7C:2E:BD:62:F9:52 -35 0 - 1 0 27 NETGEAR21 (not associated) 00:00:48:60:CC:77 -41 0 - 1 48 79 NETGEAR77
CC:40:D0:7F:D0:C2 8C:85:90:34:72:10 0 0e- 0e 980 87 NETGEAR21
CC:40:D0:7F:D0:C2 2C:AA:8E:09:BA:AA -39 0e- 1 3 14
CC:40:D0:7F:D0:C2 64:EB:8C:7B:D4:D7 -45 0 -24 0 3
CC:40:D0:7F:D0:C2 74:81:14:A5:EE:E0 -54 1e-24 0 2
CC:40:D0:7F:D0:C2 2C:AA:8E:09:1A:C1 -55 0e- 1e 0 17
root@kali:~# aireplay-ng -9 wlan0
19:27:13 Trying broadcast probe requests...
19:27:15 No Answer...
19:27:15 Found 0 APs
root@kali:~# aireplay-ng -9 wlan0
19:27:18 Trying broadcast probe requests...
19:27:20 No Answer...
19:27:20 Found 0 APs
root@kali:~# aireplay-ng -9 wlan0
19:27:21 Trying broadcast probe requests...
19:27:23 No Answer...
19:27:23 Found 0 APs
root@kali:~# aireplay-ng -9 wlan0
19:27:23 Trying broadcast probe requests...
19:27:25 No Answer...
19:27:25 Found 0 APs
root@kali:~# iwconfig
wlan0 IEEE 802.11 Mode:Monitor Frequency:2.467 GHz Tx-Power=18 dBm
Retry short limit:7 RTS thr:off Fragment thr:off
Power Management:off
lo no wireless extensions.
eth0 no wireless extensions.
答案1
您首先向我们展示了该无线芯片组能够注入数据包。唉,我敢打赌,如果逐字重复这个过程(不容易),它也会以同样的方式运行。
我认为问题应该更多是“为什么它在使用后停止注入数据包airodump
”? (而不是“Wifi 无法工作”……很抱歉因为提出了一个观点而鞭打死马,但请继续阅读)
众所周知,在监控模式下使用 Alfa AWUS036ACH WiFi 芯片组时,必须手动更改 WiFi 通道。
因此,在本次会话中,iwconfig
您从输出开始收听通道 10 (2.457 GHz)。
要么是缺少一个步骤,要么是因为通道 9 与通道 10 的范围重叠而检测到通道 9 中的 BSSID/接入点,所以第一个aireplay
成功。
在下一步中,airodump
使用更改了频道(多次),并留在出口处,wlan0
监视频道 12 (2.467 GHz)。
随后,aireplay
注入测试不再起作用,因为附近没有在通道 12 上工作的 AP。
这可以通过消息“找到 0 个 AP”以及输出airodump
(看到 2 个 AP,通道 9 和 4)来双重确认。
TLDR 当处于监视模式时,airodump
被编码用于自行更改频道以进行扫描。反之,使用前aireplay
需要更换频道手动当使用 AWUS036ACH 芯片组时,在 Wifi 芯片组中连接到有 AP 的通道。
我还在 Ubuntu 论坛中找到了一个用于更改监视模式通道的脚本无法更改 wlan0 固定频道
#!/bin/bash
# this script is to change the channel of the wireless card to the one specified, then puts it in monitor mode.
# make sure you uncheck enable wireless in nm-applet before continuing (this script will have no effect otherwise)
# note that if you are using airmon-ng you may want to manually remove all of the monitor devices it has created. (you don't need them)
# to do this run "airmon-ng stop mon0" and if you had more then run "airmon-ng stop mon1" etc.
# this script has undefined consequences if the commands fail (no error checking)
# it would be good idea to run each of the commands listed here separately to make sure they all work before making use of this script
# note that this is just sequence of commands which I would normally run manually on my system, they may not work on yours.
# also you need to run the script as root
#change this to the interface you wish to change
IFACE="wlan0"
ifconfig $IFACE down
iwconfig $IFACE mode managed
ifconfig $IFACE up
iwconfig $IFACE channel $@
ifconfig $IFACE down
iwconfig $IFACE mode monitor
ifconfig $IFACE up
PS 我建议不要在没有尝试了解工具在做什么的情况下使用它们。
使用 20Mhz 频道时的 PPS 2.4GHz Wifi Spectrum 标准频道分配。