Alfa AWUS036NHR v2 on Kali 2

[Peliori]

Hello there forum,

I have massive problems with the NHR v2. I know most people try to avoid this device but I wanted to give it a chance. But sadly it fails for me even though I tried hard.
So this is my problem:
I put the device in monitor mode (airmon-ng) and look for my network (and its BSSID). Once found I try to use reaver. But it fails hard with this:
"failed to associate"

I also tried Bully. Same problem.

Any suggestion? Any parameter to change? A need for driver update? Or is the card really that bad?

Sysinfo:
Device: Alfa AWUS036NHR v2
Driver: rtl8192cu
Chipset: RTL8188RU
Yes it is really v2 and it is an original alfa device.

[rBg]

What commands are you using for Kali 2 to enter this alfa device into monitor mode?

[grid]

You might also try doing airmon-ng check, to see if there are any interfering processes running.

[Peliori]

@rBg
this is my procedure:

//list my devices
ifconfig

// it shows wlan0 (internal device) and wlan1 (the awus036nhr)

airmon-ng start wlan1

//check in ifconfig if it is in monitor mode or not

ifconfig wlan1mon

//result should look like "Link encap:UNSPEC" if it does not I manually put it in monitor mode

ifconfig wlan1 down
iwconfig wlan1 mode monitor
ifconfig wlan1 up

// I also use macchanger -r on the monitor device:
ifconfig wlan1mon down
macchanger -r wlan1mon
ifconfig wlan1mon up
ifconfig wlan1mon

// If everything worked well I see:
ifconfig wlan1mon
// resulted in ... Link encap:UNSPEC and a randomized MAC


Maybe taking down the wlan1mon interface is not ok. But what is my choice if I want to spoof the mac - can I start airmon-ng with a spoofed mac?

[grid]

I don't think you can change your MAC using airmon-ng (somebody correct me if I'm wrong). But several of the other tools in the aircrack suite have options to spoof a MAC address.

[Peliori]

But how do I use reaver then with a spoofed mac?

[soxrok2212]

A lot of problems have risen between Network Manager and the new version of Aircrack-ng. This is what I would do:

airmon-ng check kill
airmon-ng start wlan1
ifconfig wlan1mon down
macchanger -r wlan1mon
ifconfig wlan1mon up

Then you should be able to proceed, else I suspect it is a driver limitation.

For reaver with a spoofed mac, copy whatever macchanger gave you and try:

reaver -i wlan1mon -c X -b <target mac> -m <spoofed mac> <any other options you want here>

[Peliori]

@soxrok2212

Today I already tried exactly the same steps that you've mentioned soxrok! check kill, start wlan1 and so on. But association fails and wps transaction fails for all access points. I searched a lot in the web for a report that says the nhr v2 is working - but all I could find is that everybody says it is not working. Conclusion: either the access points are not vulnerable, the nhr v2 is messed up or it is my fault.

Any further suggestions?