Simple check for proper injection

[Toolio]

Thanks for the quick response!
Those steps were EXACTLY what I tried, and no dice. However, having done quite a bit of web scouring, I have to say that I'm confused as to why my card (an Atheros 5005G cardbus) is not injecting, as it is supposed to, at least in theory. I read on MadWiFi's page that said app does not support G or superG mode enabled, so perhaps that could be an issue (and if it is, does anyone have any clue how one would go about DISabling that mode?) Or do I need to apply a patch to MadWiFi? To be honest, MadWiFi runs automatically when I start kismet or run airmon, and I wonder if there's a way to manually adjust which Mad driver its using?
Lot of blind postulating, sorry. If anyone else has had this problem, please help.
One last thing - if my card is not associating in BT, could that be a related issue? (it still works fine in windows)
Thanks in advance
Peace

[xz123]

so.. if I try it and sniff with wlan0, I get malformed packets, if I sniff with wifi0 they're deauth-packets. (always injecting with wlan0, though). wifi0 and wlan0 are both my zcom 325hp+, for some reason with hostap I get those two adapters in iwconfig.
so is it working now?

(I tried to crack my own wlan recently, injected and dumped via wlan0, got 1000000+ ivs and couldn't crack it - might this be due to this issue? )

[taipan]

i tried it with wireshark and captured the deauth packets, but when i analysed the packets i saw the Receiver as "Broadcast" is it normal?, i think that deauthenticating must be directed not broadcast. Receiver : AP MAC Transmitter: Client MAC it should be. Dont u agree?

[taipan]

and there is another issue. in TCP/IP all the packets are routed from the localhost. Seeing the packets on local does not mean that u are sending these packets. I think it should be seen from another device.

[hobbes]

Originally Posted by taipan

i tried it with wireshark and captured the deauth packets, but when i analysed the packets i saw the Receiver as "Broadcast" is it normal?, i think that deauthenticating must be directed not broadcast...

It is normal. Because the aireplay-ng deauth command does not include a specific client mac it is classified as broadcast as any client on the AP can recieve it. The deauth command can only come from the AP so aireplay-ng generates a packet coming from the target AP directed to either a client you specify or it just broadcasts it to all clients connected to that AP. Hope this answers your question.

[taipan]

Originally Posted by hobbes

It is normal. Because the aireplay-ng deauth command does not include a specific client mac it is classified as broadcast as any client on the AP can recieve it. The deauth command can only come from the AP so aireplay-ng generates a packet coming from the target AP directed to either a client you specify or it just broadcasts it to all clients connected to that AP. Hope this answers your question.

very useful information, thank you

[packetmaestro]

FTI: I just wanted to say that my Intel Pro Wireless 2915ABG mini-pci on a dell 9300 does not do packet injection. Didn't pass the test.

[bigcat99]

I've tried both of the instructions for the DWL-G122 B1, and when I run the "injection test" I only get malformed packets. I've got the DWL-G122 B1 and here's what I do...

1: after boot is done: modprobe rt2570
2: insert card
3: ifconfig rausb0 up
4: iwconfig rausb0 mode monitor
5: airmon-ng start rausb0 (just in case iwconfig didn't actually do it.)
6: aireplay -0 10 -a 01:02:03:04:05:06 rausb0
7: launch wireshark (ethereal) and look for deauth packets.
8: be sad because there were no deauth packets but a lot of malformed packets.

it might be important to note: when i run airmon-ng start rausb0 it says monitor mode enabled but then says unable to find command force prism header.

[pilotsnipes]

1: after boot is done: modprobe rt2570
2: insert card
3: ifconfig rausb0 up
4: iwconfig rausb0 mode monitor
5: airmon-ng start rausb0 (just in case iwconfig didn't actually do it.)
6: aireplay -0 10 -a 01:02:03:04:05:06 rausb0
7: launch wireshark (ethereal) and look for deauth packets.
8: be sad because there were no deauth packets but a lot of malformed packets.

Do this:

1: after boot is done insert card
2: airmon-ng start (DO NOT PUT rausb0 here)
3: aireplay -0 10 -a 01:02:03:04:05:06 rausb0
4: launch wireshark (ethereal) and look for deauth packets.


Continue as before.

[bigcat99]

Originally Posted by pilotsnipes

Do this:

1: after boot is done insert card
2: airmon-ng start (DO NOT PUT rausb0 here)
3: aireplay -0 10 -a 01:02:03:04:05:06 rausb0
4: launch wireshark (ethereal) and look for deauth packets.


Continue as before.

Do I still modprobe rt2570 and ifconfig rausb0 up?