PDA

View Full Version : Problem sending packets on airplay-ng and mdk3



link0111
2020-07-17, 01:18
Hello everyone, this is my first post and im very happy to write here and to colaborate in this forum.


im running kali 2020.2 on a raspberry pi 4 b

these are my especifications:



Distributor ID: Kali
Description: Kali GNU/Linux Rolling
Release: 2020.2
Codename: kali-rolling



interfaces:


kali@kali:~$ sudo ifconfig

eth0: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500
ether dc:a6:32:7f:11:31 txqueuelen 1000 (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1000 (Local Loopback)
RX packets 8 bytes 400 (400.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 8 bytes 400 (400.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

wlan0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.0.20 netmask 255.255.255.0 broadcast 192.168.0.255
inet6 fe80::9c6d:6c1a:433b:dcb5 prefixlen 64 scopeid 0x20<link>
ether dc:a6:32:7f:11:32 txqueuelen 1000 (Ethernet)
RX packets 11291 bytes 11491082 (10.9 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 8015 bytes 1069825 (1.0 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0


chipset:


root@kali:/home/kali# lspci

00:00.0 PCI bridge: Broadcom Inc. and subsidiaries Device 2711 (rev 10)
01:00.0 USB controller: VIA Technologies, Inc. VL805 USB 3.0 Host Controller (rev 01)


so the problem start when im doing an deauth attack on my router, using this command:


aireplay-ng -0 0 -a //router bssid wlan0mon

the program start the attack but it freeze after 10-15 seconds

this is my log: (all BSSID are remplaced with "00:00:00:00:00")



root@kali:~# airmon-ng check kill

airmon-ng Killing these processes:

PID Name
333 dhclient
515 wpa_supplicant

root@kali:~# airmon-ng start wlan0


PHY Interface Driver Chipset

phy0 wlan0 brcmfmac Broadcom 43430

(mac80211 monitor mode vif enabled for [phy0]wlan0 on [phy0]wlan0mon)
command failed: Unknown error 524 (-524)
(mac80211 station mode vif disabled for [phy0]wlan0)

root@kali:~# airmon-ng start wlan0


PHY Interface Driver Chipset

phy0 wlan0 brcmfmac Broadcom 43430

(mac80211 monitor mode already enabled for [phy0]wlan0 on [phy0]wlan0mon)


then:



root@kali:~# airodump-ng wlan0mon




CH 14 ][ Elapsed: 0 s ][ 2020-07-17 00:57

BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID

00:00:00:00:00:00 -74 3 0 0 11 54 WPA2 CCMP PSK xxx
00:00:00:00:00:00 -67 4 0 0 11 360 WPA2 CCMP PSK <length: 0>
00:00:00:00:00:00 -74 3 0 0 10 54 WPA2 CCMP PSK xxx
00:00:00:00:00:00 -64 4 0 0 6 540 WPA2 CCMP PSK xxx
00:00:00:00:00:00 -52 9 20 0 1 54 WPA2 CCMP PSK xxx
00:00:00:00:00:00 -67 7 0 0 11 360 WPA2 CCMP PSK xxx

BSSID STATION PWR Rate Lost Frames Notes Probes

00:00:00:00:00:00 00:00:00:00:00:00 -57 0 -11e 0 1
00:00:00:00:00:00 00:00:00:00:00:00 -76 2e- 1e 17 39
Quitting...


here is where the problems begin:



root@kali:~# aireplay-ng -0 0 -a 00:00:00:00:00:00 wlan0mon
00:58:12 Waiting for beacon frame (BSSID: 00:00:00:00:00:00) on channel 3
00:58:23 No such BSSID available.
root@kali:~# airodump-ng --bssid 00:00:00:00:00:00 --channel 6 wlan0mon




CH 6 ][ Elapsed: 0 s ][ 2020-07-17 00:58

BSSID PWR RXQ Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID

00:00:00:00:00:00 -63 100 33 1 0 6 540 WPA2 CCMP PSK HomeOffice

BSSID STATION PWR Rate Lost Frames Notes Probes

Quitting...
root@kali:~# aireplay-ng -0 0 -a 00:00:00:00:00:00 wlan0mon
00:59:16 Waiting for beacon frame (BSSID: 00:00:00:00:00:00) on channel 6
NB: this attack is more effective when targeting
a connected wireless client (-c <client's mac>).
00:59:17 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:17 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:18 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:18 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:19 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:19 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:19 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:20 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:20 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:21 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:21 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:22 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:22 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:23 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:23 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:23 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:24 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:24 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:25 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:25 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:26 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:26 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:27 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:27 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:28 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:28 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:28 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:29 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:29 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:30 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:30 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:31 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:31 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:32 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:32 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:32 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:33 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:33 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:34 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]
00:59:34 Sending DeAuth (code 7) to broadcast -- BSSID: [00:00:00:00:00:00]




and it freeze right there.

in mdk3 is exactly the same :(
After searching forums and trying my ideas, I have not managed to solve it and that makes me crazy. so I appreciate any help.
Thank you for reading ;)