Setup and Discovery

1
# Preferred: install the packaged driver
2
sudo apt install realtek-rtl88xxau-dkms
3

4
# Plug in the NIC. In a Kali VM, attach the adapter under
5
# Settings -> Ports -> USB (select USB 3.0) and add the "Realtek 802.11n NIC" filter.
6

7
# Build the aircrack-ng rtl8812au driver from source
8
git clone -b v5.6.4.2 https://github.com/aircrack-ng/rtl8812au.git
9
cd rtl8812au
10
sudo ./dkms-install.sh

1
# 2024 rebuild sequence if the driver breaks after an update
2
# 1. Unplug the USB adapter
3
# 2. Find the installed dkms module name
4
dkms status
5
# 3. Remove the old driver (replace <module name> with the value above)
6
sudo dkms remove <module name> --all
7
# 4. Restart the VM
8
# 5. Delete the old git folder (rtl8812au)
9
# 6. Re-clone and build a known-working commit
10
git clone https://github.com/aircrack-ng/rtl8812au.git
11
cd rt*
12
sudo apt-get update
13
sudo apt-get install bc mokutil build-essential libelf-dev linux-headers-`uname -r`
14
sudo apt-get upgrade
15
git checkout 63cf0b4          # set to the known-working version
16
git status
17
sudo make
18
sudo make install
19
sudo service NetworkManager restart
20
# 7. Plug in the USB adapter

1
# Driver source and concurrent-mode patch
2
https://github.com/ivanovborislav/rtl8812au
3

4
# Alfa AWUS036ACH (2025) build
5
sudo apt update
6
sudo apt upgrade
7
sudo apt-get dist-upgrade
8
sudo apt install linux-headers-$(uname -r | sed 's,[^-]*-[^-]*-,,')
9
git clone https://github.com/morrownr/8812au-20210820
10
cd 8812au-20210820
11
sudo ./install-driver.sh

1
# If Wi-Fi will not connect after driver install
2
sudo systemctl stop wpa_supplicant.service
3
sudo systemctl mask wpa_supplicant.service
4
reboot
5
sudo systemctl unmask wpa_supplicant.service
6
sudo systemctl start wpa_supplicant.service
7

8
# On Parrot etc. if your USB Wi-Fi adapter is given a long interface name
9
sudo ln -s /dev/null /etc/udev/rules.d/80-net-setup-link.rules

1
# Check the wireless device
2
iwconfig
3
iw dev wlan0 info
4

5
# Quick method
6
sudo airmon-ng start wlan0
7
sudo airodump-ng wlan0mon
8

9
# Kill processes that interfere with monitor mode
10
sudo airmon-ng check kill
11

12
# Manual method
13
sudo ip link set wlan0 down
14
sudo iw dev wlan0 set type monitor      # or: sudo iwconfig wlan0 mode monitor
15
sudo ip link set wlan0 up
16

17
# Return the card to managed mode
18
sudo ip link set wlan0 down
19
sudo iw dev wlan0 set type managed
20
sudo service networking restart
21
sudo service NetworkManager restart
22
sudo ip link set wlan0 up

1
# Set transmit power and channel
2
sudo iwconfig wlan0 txpower 30
3
sudo iw wlan0 set channel 6
4

5
# View / change the channel of a monitor interface
6
iwlist mon0 channel
7
iwconfig mon0 channel 3

1
# Kismet
2
wget -O - https://www.kismetwireless.net/repos/kismet-release.gpg.key | sudo apt-key add -
3
echo 'deb https://www.kismetwireless.net/repos/apt/git/kali kali main' | sudo tee /etc/apt/sources.list.d/kismet.list
4
sudo apt update
5
sudo apt install kismet
6
sudo apt install kismet-capture-linux-wifi kismet-capture-linux-bluetooth kismet-logtools
7

8
# Additional wireless tooling
9
sudo apt-get install hcxtools

1
# Detect surrounding networks in monitor mode
2
sudo airodump-ng wlan0mon
3

4
# See only network SSIDs quickly
5
iw dev wlan0 scan | grep SSID
6

7
# Target a specific AP on its channel and write a capture
8
sudo airodump-ng -c <channel> --bssid AA:BB:CC:DD:EE:FF -w capture wlan0mon

1
# Kismet
2
sudo kismet -c wlan0
3
# Web UI: http://127.0.0.1:2501/
4

5
# Bettercap
6
sudo bettercap -caplet http-ui -iface wlan0      # default creds: user:pass
7
# Web UI: http://127.0.0.1:80/
8

9
# Bettercap recon from the CLI
10
sudo bettercap -iface wlan0
11
wifi.recon on
12
set wifi.show.sort clients desc
13
set ticker.commands 'clear; wifi.show'
14
set ticker.period 5
15
ticker on

1
sudo nmcli dev wifi list

1
# wash lists WPS-enabled access points (see the WPS page for the attacks)
2
sudo wash --interface wlan0 --scan --survey

1
# Set / view the channel of the monitor interface
2
iwconfig mon0 channel 3
3
iwlist mon0 channel
4

5
# Injection test
6
sudo aireplay-ng -9 wlan0mon