Hands-On Penetration Testing with Kali NetHunter

Exercise – de-authenticating a specific client

If you're targeting a specific client on a wireless network, we can use the following command to send deauth frames to the access point but only knock off the specified client.

Use the airodump-ng --bssid <target's BSSID> -c <channel #> <monitor interface> command to actively monitor the target network:

As you can see, there are a few stations (client) that are associated with the access point. Let's attempt a client disassociation:

aireplay-ng -0 0 -a <target's bssid> -c <client's mac addr> wlan1mon

• -0 indicates we are executing a de-authentication attack.
• 0 specifics a continuous attack. If ...