Time for action – deauthentication attack on the client

We will assume that the wireless client has a network Wireless Lab configured on it, and it actively sends probe requests for this network, when it is not connected to any access point. In order to find the security configuration of this network, we will need to create multiple access points. For our discussion, we will assume that the client profile is an open network, WEP protected, WPA-PSK, or WPA2-PSK. This means we will have to create four access points:

1. To do this, we will first create four virtual interfaces—wlan0mon to wlan0mon3, using the iw wlan0 interface add wlan0mon type monitor command multiple times adding 1 to the end of the monitor name each time:

   

2. You can view all these newly created interfaces using the iwconfig command:

   

3. Now we will create the open AP on wlan0mon:

   

4. Let's create the WEP protected AP on wlan0mon1:

   

5. The WPA-PSK AP will be on wlan0mon2:

   

6. WPA2-PSK AP will be on wlan0mon3:

   

7. We can run airodump-ng on the same channel...