# packet injection

Published articles for packet injection.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Pwning WPA/WPA2 Networks With Bettercap and the PMKID Client-Less Attack

DevFeed: [Pwning WPA/WPA2 Networks With Bettercap and the PMKID Client-Less Attack](<https://devfeed.tech/articles/pwning-wpa-wpa2-networks-with-bettercap-and-the-pmkid-client-less-attack-41261.md>)

Original publisher: [Read original article](<https://www.evilsocket.net/2019/02/13/Pwning-WiFi-networks-with-bettercap-and-the-PMKID-client-less-attack/>)

Author: Simone Margaritelli

Published: 2019-02-13T15:53:31Z

Content type: tutorial

Language: en

Sources: [evilsocket](<https://devfeed.tech/sources/evilsocket.md>)

Topics: [Networks](<https://devfeed.tech/topics/networks.md>), [passwords](<https://devfeed.tech/topics/passwords.md>), [client](<https://devfeed.tech/topics/client.md>), [GPU](<https://devfeed.tech/topics/gpu.md>)

Tags: [attacks](<https://devfeed.tech/tags/attacks.md>), [bettercap](<https://devfeed.tech/tags/bettercap.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [deauth](<https://devfeed.tech/tags/deauth.md>), [handshake](<https://devfeed.tech/tags/handshake.md>), [hashcat](<https://devfeed.tech/tags/hashcat.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [monitor-mode](<https://devfeed.tech/tags/monitor-mode.md>), [networks](<https://devfeed.tech/tags/networks.md>), [packet-injection](<https://devfeed.tech/tags/packet-injection.md>), [password-cracking](<https://devfeed.tech/tags/password-cracking.md>), [passwords](<https://devfeed.tech/tags/passwords.md>), [pmkid](<https://devfeed.tech/tags/pmkid.md>), [rsn](<https://devfeed.tech/tags/rsn.md>), [rsn-pmkid](<https://devfeed.tech/tags/rsn-pmkid.md>), [wifi-hacking](<https://devfeed.tech/tags/wifi-hacking.md>), [wireless-security](<https://devfeed.tech/tags/wireless-security.md>), [wpa](<https://devfeed.tech/tags/wpa.md>), [wpa2](<https://devfeed.tech/tags/wpa2.md>)

### AI overview

This tutorial explains new WiFi features in bettercap, including automated EAPOL handshake capture and a PMKID client-less attack against WPA/WPA2 access points. It also covers deauthentication-based capture workflows and preparing captured files for hashcat password cracking.

### Source excerpt

In this post, I'll talk about the new WiFi related features that have been recently implemented into bettercap, starting from how the EAPOL 4-way handshake capturing has been automated, to a whole new type of attack that will allow us to recover WPA PSK passwords of an AP without clients. We'll start with the assumption that your WiFi card supports monitor mode and packet injection (I use an AWUS1900 with this driver), that you have a working hashcat (v4.2.0 or higher is required) installation (ideally with GPU support enabled) for cracking and that you know how to use it properly either for dictionary or brute-force attacks, as no tips on how to tune the masks and/or generate proper dictionaries will be given :) On newer macOS laptops, the builtin WiFi interface `en0` already supports monitor mode, meaning you won't need a Linux VM in order to run this :)

## Project PITA: Build a Mini Mass Deauther Using Bettercap and a Raspberry Pi Zero W

DevFeed: [Project PITA: Build a Mini Mass Deauther Using Bettercap and a Raspberry Pi Zero W](<https://devfeed.tech/articles/project-pita-build-a-mini-mass-deauther-using-bettercap-and-a-raspberry-pi-zero-w-41259.md>)

Original publisher: [Read original article](<https://www.evilsocket.net/2018/07/28/Project-PITA-Writeup-build-a-mini-mass-deauther-using-bettercap-and-a-Raspberry-Pi-Zero-W/>)

Author: Simone Margaritelli

Published: 2018-07-28T17:01:56Z

Content type: tutorial

Language: en

Sources: [evilsocket](<https://devfeed.tech/sources/evilsocket.md>)

Topics: [Raspberry Pi](<https://devfeed.tech/topics/raspberry-pi.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [Network](<https://devfeed.tech/topics/network.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [ssh](<https://devfeed.tech/topics/ssh.md>), [Bluetooth](<https://devfeed.tech/topics/bluetooth.md>), [clients](<https://devfeed.tech/topics/clients.md>), [file](<https://devfeed.tech/topics/file.md>)

Tags: [bettercap](<https://devfeed.tech/tags/bettercap.md>), [ble](<https://devfeed.tech/tags/ble.md>), [bluetooth](<https://devfeed.tech/tags/bluetooth.md>), [btnap](<https://devfeed.tech/tags/btnap.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [deauth](<https://devfeed.tech/tags/deauth.md>), [handshake-capture](<https://devfeed.tech/tags/handshake-capture.md>), [kali](<https://devfeed.tech/tags/kali.md>), [linux](<https://devfeed.tech/tags/linux.md>), [monitor-mode](<https://devfeed.tech/tags/monitor-mode.md>), [packet-injection](<https://devfeed.tech/tags/packet-injection.md>), [pi](<https://devfeed.tech/tags/pi.md>), [portable-hacking](<https://devfeed.tech/tags/portable-hacking.md>), [project](<https://devfeed.tech/tags/project.md>), [raspberry](<https://devfeed.tech/tags/raspberry.md>), [raspberry-pi](<https://devfeed.tech/tags/raspberry-pi.md>), [rpi](<https://devfeed.tech/tags/rpi.md>), [rpi-zero-w](<https://devfeed.tech/tags/rpi-zero-w.md>), [rpi0w](<https://devfeed.tech/tags/rpi0w.md>), [wifi](<https://devfeed.tech/tags/wifi.md>), [wireless-security](<https://devfeed.tech/tags/wireless-security.md>), [wpa2](<https://devfeed.tech/tags/wpa2.md>), [writeup](<https://devfeed.tech/tags/writeup.md>), [zero](<https://devfeed.tech/tags/zero.md>)

### AI overview

A writeup showing how to build a pocket-sized WiFi deauthenticator with a Raspberry Pi Zero W, Kali Linux, Nexmon drivers, and bettercap. It covers WiFi scanning, deauthentication packets, WPA2 handshake capture, initial SSH and WiFi configuration, and Bluetooth access.

### Source excerpt

A few days ago I started playing with some idea I had from a few weeks already, using a Raspberry Pi Zero W to make a mini WiFi deauthenticator: something in my pocket that periodically jumps on all the channels in the WiFi spectrum, collects information about the nearby access points and their connected clients and then sends a deauthentication packet to each one of them, resulting in some sort of WiFi jammer on the 802.11 level. As an interesting "side effect" of this jammer (the initial intent was purely for the lulz) is that the more it deauths, the higher the changes to also sniff WPA2 handshakes. Thanks to the awesome work of the Kali and Nexmon communities in packaging the nexmon drivers and utilities and to the recent changes we released in bettercap, this was very easy to setup and to script and given the interest the tweet had I thought to share this writeup :) This awesome case has been designed by @elkentaro and can be found on [his Thingverse page](https://www.thingiverse.com/thing:3018480).