and -0 stands for deauth-attack(deauth-packets value is 3). Here, -a is to define wifi bssid(mac address) and -c is for a user who is connected to the wifi. Type this command: aireplay-ng -0 3 -a A1:B2:C3:D4:E5:F6 -c wlan0 Now we are disconnecting a user from wifi to capture a handshake This command will show you the user’s bssid(as STATION) which are connected to the wifi.Īnd it will start capturing handshake, btw, it is not able to capture a handshake now. airodump-ng -c 7 -bssid A1:B2:C3:D5:E6:F7 -w output wlan0mon if there are no users on wifi, we cant capture a handshake. in this process, the attacker captures the handshake that is being sent to wifi by the user to connect the wifi again. because when we try to capture a wifi handshake, we send deauthentication packets to a user who is currently using that wifi so, he may disconnect and try to connect to it again. but it is necessary that there should be one or more user connect to the wifi. Now, this is a step to capture a wifi handshake. you can detect the victim wifi by his ESSID(basically wifi name) It will start a window to capture traffic of wifis(should be in range). Now we need to know about victim’s BSSID (mac address) and we need to know on which channel is victim’s wifi running.

Now your wireless adapter has a capability to interact with other’s wifi Start monitor mode of your wlan0 wireless adapter(you may have wlan1 or wlan2)

I am distributing this attack in various steps.

How to use aircrack on parrot