Packet Injection failure with Alfa AWUS051NHv2 (RT3572 chipset, driver rt2800usb)

[DeletId]

Alfa card has no problems entering monitor mode, but packet injection fails every time. From what I've read the chipset and driver are supposed to be supported, and I've seen other users post successful injections with the same chipset. I have found a similar thread, and tried to follow the advice there, but no luck. That thread was specific to a VM-deployment of Kali, so I decided to open a new one as I am running Kali off a Raspberry Pi 3. None of the suggestions I've tried have worked. At this point I'm out of ideas. Any help would be greatly appreciated!

Essential Info:
Version: Kali 4.4.50-v7 #1, armv71
Hardware: Raspberry Pi 3 (B); 32gb microSD card
Wireless Card:Alfa AWUS051NH v.2, RT3572 chipset, driver rt2800usb

Outputs:
iwconfig:

wlan0 IEEE 802.11bgn ESSID:off/any
Mode:Managed Access Point: Not-Associated
Retry short limit:7 RTS thr:off Fragment thr:off
Encryption key:off
Power Management:on

lo no wireless extensions.

wlan1mon IEEE 802.11abgn Mode:Monitor Frequency:2.432 GHz Tx-Power=20 dBm
Retry short limit:7 RTS thr:off Fragment thr:off
Power Management:off

eth0 no wireless extensions.


dmesg:

[ 7.065426] Netfilter messages via NETLINK v0.30.
[ 7.469516] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 7.501248] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 7.548614] brcmfmac: brcmf_add_if: ERROR: netdev:wlan0 already exists
[ 7.555335] brcmfmac: brcmf_add_if: ignore IF event
[ 7.567139] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 7.573855] brcmfmac: power management disabled
[ 8.096695] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 8.103982] brcmfmac: power management disabled
[ 8.135969] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 8.143132] ieee80211 phy1: rt2x00lib_request_firmware: Info - Loading firmware file 'rt2870.bin'
[ 8.158076] ieee80211 phy1: rt2x00lib_request_firmware: Info - Firmware detected - version: 0.36
[ 8.473284] smsc95xx 1-1.1:1.0 eth0: link up, 100Mbps, full-duplex, lpa 0xCDE1
[ 9.049593] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 9.056565] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 9.969564] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 10.422377] brcmfmac: brcmf_add_if: ERROR: netdev:wlan0 already exists
[ 10.429244] brcmfmac: brcmf_add_if: ignore IF event
[ 10.437472] brcmfmac: brcmf_p2p_create_p2pdev: set p2p_disc error
[ 10.455890] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 10.475935] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 138.363000] device wlan1mon entered promiscuous mode
[ 436.923926] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 436.930632] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 436.930703] brcmfmac: power management disabled
[ 437.447614] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 437.447640] brcmfmac: power management disabled
[ 437.472586] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 438.357324] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 439.247298] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 439.699940] brcmfmac: brcmf_add_if: ERROR: netdev:wlan0 already exists
[ 439.699980] brcmfmac: brcmf_add_if: ignore IF event
[ 439.702259] brcmfmac: brcmf_p2p_create_p2pdev: set p2p_disc error
[ 439.737066] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 439.760464] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 782.577494] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 782.577525] brcmfmac: power management disabled
[ 787.967283] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 1098.537559] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 1098.537721] brcmfmac: power management disabled
[ 1103.965704] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 1414.557770] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 1414.557797] brcmfmac: power management disabled
[ 1419.956592] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 1730.536608] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 1730.536638] brcmfmac: power management disabled
[ 1735.955383] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 2046.556447] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 2046.556540] brcmfmac: power management disabled
[ 2051.963949] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 2362.556618] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 2362.556647] brcmfmac: power management disabled
[ 2367.955327] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 2678.587162] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 2678.587187] brcmfmac: power management disabled
[ 2683.965016] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 2994.585223] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 2994.585287] brcmfmac: power management disabled
[ 2999.934845] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 3310.585220] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 3310.585394] brcmfmac: power management disabled
[ 3315.933562] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 3626.583193] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 3626.583218] brcmfmac: power management disabled
[ 3631.942176] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 3942.582069] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 3942.582149] brcmfmac: power management disabled
[ 3947.930817] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 4258.585005] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 4258.585068] brcmfmac: power management disabled
[ 4263.933857] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 4574.587442] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 4574.587502] brcmfmac: power management disabled
[ 4579.917379] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 4890.559066] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 4890.559126] brcmfmac: power management disabled
[ 4895.928342] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready


Airmon, Airodump, Aireplay:
root@kali:~# airmon-ng check kill

Killing these processes:

PID Name
1471 wpa_supplicant
1473 dhclient

root@kali:~# airmon-ng start wlan1


PHY Interface Driver Chipset

phy0 wlan0 ?????? Broadcom 43430
phy1 wlan1 rt2800usb Ralink Technology, Corp. RT3572

(mac80211 monitor mode vif enabled for [phy1]wlan1 on [phy1]wlan1mon)
(mac80211 station mode vif disabled for [phy1]wlan1)

root@kali:~# aireplay-ng --test wlan1mon
21:34:28 Trying broadcast probe requests...
21:34:30 No Answer...
21:34:30 Found 0 APs

root@kali:~# airodump-ng wlan1mon


CH 4 ][ Elapsed: 33 s ][ 2017-05-14 21:35

BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID

OMIT -11 36 25 0 6 54e. WPA2 CCMP PSK <length: 0>
OMIT -49 24 54 0 1 54e WPA2 CCMP PSK OMIT
OMIT -62 17 11 0 11 54 . WPA2 CCMP PSK OMIT
OMIT -70 16 1 0 1 54e WPA2 CCMP PSK OMIT
OMIT -71 17 1 0 6 54e WPA2 CCMP PSK OMIT
OMIT -75 15 11 0 1 54e WPA2 CCMP PSK OMIT
OMIT -77 2 0 0 1 54e WPA2 CCMP PSK OMIT
OMIT -77 17 31 0 6 54e WPA2 CCMP PSK OMIT
OMIT -78 20 0 0 2 54 . WPA2 CCMP PSK OMIT
OMIT -80 2 0 0 11 54e. WPA2 CCMP PSK OMIT

BSSID STATION PWR Rate Lost Frames Probe

(not associated) OMIT -38 0 - 1 0 3 OMIT

root@kali:~# aireplay-ng --test wlan1mon
21:39:09 Trying broadcast probe requests...
21:39:11 No Answer...
21:39:11 Found 5 APs

21:39:11 Trying directed probe requests...
21:39:11 OMIT - channel: 11 - 'OMIT'
21:39:17 0/30: 0%

21:39:17 OMIT - channel: 11 - 'OMIT'
21:39:23 0/30: 0%

21:39:23 OMIT - channel: 6 - 'OMIT'
21:39:29 0/30: 0%

21:39:29 OMIT - channel: 6 - 'OMIT'
21:39:35 0/30: 0%

21:39:35 OMIT - channel: 6 - ''
21:39:41 0/30: 0%


Relevant Links:

1) Related thread on Kali Forums (https://forums.kali.org/showthread.php?27514-Alfa-AWUS051NH-v2-not-working-with-rt2x00usb) - Attempted several suggestion from this page, but nothing worked. The last poster had what I thought was the best suggestion I've seen so far:


I also downloaded drivers from Alpha for Linux. In firmware zip is rt2870.bin, renamed /lib/firmware/rt2870.bin (from instalation and updated via apt-get update && apt-get upgrade -y followed by apt-get distro-upgrade) to /lib/firmware/rt2870.bin.old I then copied the rt2870.bin from Alpha website to /var/firmware. Restarted box shutdown -r now. Now everything works as intendted so far.

However this still did not solve my problem.

2) Kali Bugs (https://bugs.kali.org/view.php?id=3999) - This card has a known issue with injection over 5ghz networks, but that isn't my problem here. Still I linked this in case anyone wiser than I may find it helpful.

Again, thanks very much for any assistance (and for reading this, I know it was a lot).

[Mars]

I have the same configuration (raspberry PI3+kali kali 4.4.50-v7) and the same problem.
root@kali:~# aireplay-ng -9 wlan1mon
16:39:32 Trying broadcast probe requests...
16:39:34 No Answer...
...

Have anyone resolved this problem?

[kcdtv]

You should update your system,
I guess you are using one of this kernels that provoke this bug that was known to happen some time ago.
No injection with rt2800usb and it was unable to detect the client connected to the PA.
With an updated system

uname -a
Linux kalimuX0 4.9.0-kali4-amd64 #1 SMP Debian 4.9.25-1kali1 (2017-05-04) x86_64 GNU/Linux

it works out of the box
http://pix.toile-libre.org/upload/original/1496151801.png

[re4son]

The new "testing" release of the re4son-kernel for Raspberry Pi (https://whitedome.com.au/re4son/downloads/11335/)fixes that issue.

Improvements:
------------------
Kernel: Bump to 4.9 for better RPi HW support
Bluetooth: Upgraded to bluez 5.39. It's fast and rock solid
WiFi injection: Full support for Alfa AWUS051NH v2

Issues:
---------
TFT touch displays from 4D-Systems not yet supported. Stick with the old kernel (https://whitedome.com.au/re4son/re4son-kernel/) if you have one of those.

Installation:
--------------

sudo bash
mount /dev/mmcblk0p1 /boot
cd /usr/local/src
wget -O re4son_kali-pi_kernel_testing.tar.xz https://whitedome.com.au/re4son/downloads/11335/
tar -xJf re4son_kali-pi_kernel_testing.tar.xz
cd re4son_kali-pi_kernel_4*
./install

Please let me know how you go.

Happy hacking,
Re4son