Hands-On Penetration Testing with Kali NetHunter

Exercise – detecting access points and their manufacturers

We can detect each access point that is within range of our Kali NetHunter device. We'll be able to determine the following:

• The MAC address or BSSID of the access point
• Its signal rating by displaying a PWR value
• Its encryption standard, cipher, and authentication method
• The name of the network or ESSID

To get started, ensure your wireless network adapter is in monitoring mode. Before enabling monitoring mode, we need to ensure there aren't any processes that may hamper this process. Therefore, we use the following command to kill any such process:

airmon-ng check kill

Now we can configure our network adapter to monitoring mode using the following command:

airmon-ng start wlan1 ...