Skip to content

Instantly share code, notes, and snippets.

@Snake-Sanders
Last active December 23, 2017 10:51
Show Gist options
  • Save Snake-Sanders/bfc73504190015c23ab66b6131d65f88 to your computer and use it in GitHub Desktop.
Save Snake-Sanders/bfc73504190015c23ab66b6131d65f88 to your computer and use it in GitHub Desktop.
set airport in monitor mode for MacOS
Creating Symlink:
sudo ln -s /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport /usr/local/bin/airport
Example of sniffing in monitor mode:
sudo airport en1 sniff 1
This sniffs on channel 1 and saves a pcap capture file to /tmp/airportSniffXXXXXX.pcap (where XXXXXX will vary).
You can view this with tcpdump -r <filename> or by opening it in wireshark.
To search for active channels nearby that you can sniff, run this:
sudo airport en1 -s
Although you can capture any traffic, you can only effectively read if the network is open or you have the encryption key.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment