Raspberry Pi: WiFi Analyzer « Null Byte :: WonderHowTo

It has been a while since my last Raspberry Pitutorial, but now I am back with another tutorial. This one I should note isn't your typical tutorial, but as always lets boot up our Pi and wreck havoc.KismetAlthough there are many tools that can grab and capture network packets, Kismet is by far one of the best and thank goodness that we can install it on our Pi.We'll have to build Kismet ourselves from source code since the package in the Raspbian repository is ancient. The following are steps to build Kismet:First step is to add some developer headers and code libraries that Kismet relies on:sudo apt-get install libncurses5-dev libpcap-dev libpcre3-dev libnl-3-dev libpcap-dev libwireshark-dataNext, download the Kismet source code from the project's web page:wgethttp://www.kismetwireless.net/code/kismet-2013-03-R1b.tar.gzThere's probably a older version so pleas check the download page.3.Now extract the source tree and build the software:tar -xvf kismet-2013-03-R1b.tar.gzcd kismet-2013-03-R1b./configure --prefix=/usr --sysconfdir=/etc --with-suidgroup=pimakesudo make suidinstallI should note this install will eat up a hour of your time, please be patient. Once finished you may exit the source directory and delete it:cd .. && rm -rf kismet-2013-03-R1bPreparing Kismet for LaunchWhen a Wi-Fi adapter enters monitor mode, it means that it's not associated with any particular access point and is just listening for any Wi-Fi traffic that happens to whizz by in the air. However on Raspbian, there are utility applications running in the background that try to associate your adapter with Wi-Fi networks. I'm gonna show you how to disable these for the time being.Open up/etc/network/interfacesfor editing:sudo nano /etc/network/interfacesFind the block that starts withallow-hotplug wlan0and put a#character in front of each line:#allow-hotplug wlan0#iface wlan0 inet manual#wpa-roam /etc/wpa_supplicant/wpa_wupplicant.conf#iface dfault inet dhcpPressCtrl + Xto exit and pressywhen prompted and hitEnterkey to confirm the filename to write to. this wiil prevent,wpa_supplicantutility from interfering with Kismet.Now open up/etc/default/ifplugdfor editin:sudo nano /etc/default/ifplugd4.Find the line that saysINTERFACESand change it fromautotoetho0, then find the line that saysHOTPLUG_INTERFACESand change it from"all"to" ":INTERFACES="eth0"HOTPLUG_INTERFACES=" "This will prevent theifplugdfrom interfering.Now reboot the Pi. Once logged back in type:iwconfigThis will show that you adapter has not associated with any access points.Kismet SessionType:kismetand a colorful interface screen should show up and at first session Kismet will ask you a few questions. Use thetabkey andEnterkey to toggle between options and choose your options in general. SelectYesto start a Kismet server, then accept the default options for the Kismet server and selectStart.This is the crucial point where you'll find out if your particular Wi-FI adapter will successfully enter monitoring mode so that way Kismet can work its magic. If it isn't supported it will tell you almost right away.When you see messages saying about new detected networks starting to pop up in the log, you have successfully started your very first Kismet session. Now hit thetabto selectClose Console WIndow, and then pressingEnter.Your now looking at the main Kismet screen , which is composed of differentViewareas withNetwork Listingbeing the most prominent. You'll see any number of access points near the vicinity, including your own.The right-hand side of the screen is theGeneral Infoarea, which provides a grand overview of the Kismet session, and thePacket Graphacross the middle provides a real-time activity of the packet capture process.TheStatusarea at the bottom contains the latest messages from theKismet Serverconsole and makes it easy to spot when new access points are discovered and added to the list. There's a whole variety that you can do with Kismet, but those are for another day.ConclusionThat's the end of my first and last really long tutorial explaining Kismet in general. This could've been a tutorial on its own, since I know how hard it is to get Kismet to work properly. Of course, please give me some lovins and comment down below. Cheers. :DWant to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedHow To:Build a Pumpkin Pi — The Rogue AP & MITM Framework That Fits in Your PocketHow To:Hack WPA WiFi Passwords by Cracking the WPS PINHow To:Discover & Attack Raspberry Pis Using Default Credentials with Rpi-hunterThe Hacks of Mr. Robot:How to Build a Hacking Raspberry PiHow To:Enable Monitor Mode & Packet Injection on the Raspberry PiHow To:Set Up a Headless Raspberry Pi Hacking Platform Running Kali LinuxHow To:Log into Your Raspberry Pi Using a USB-to-TTL Serial CableHow To:Build a Portable Pen-Testing Pi BoxOpen Sesame:Make Siri Open Your Garage Door via Raspberry PiHow To:Lock Down Your DNS with a Pi-Hole to Avoid Trackers, Phishing Sites & MoreHow To:Build a Beginner Hacking Kit with the Raspberry Pi 3 Model B+How To:Hack WiFi Using a WPS Pixie Dust AttackRaspberry Pi:Hacking PlatformHow To:Load Kali Linux on the Raspberry Pi 4 for the Ultimate Miniature Hacking StationNews:Smart Home Proof of Concept Uses a Raspberry Pi to Control Air Conditioner with HoloLensRasberry Pi:IntroductionHow To:Turn Any Phone into a Hacking Super Weapon with the SonicHow To:Boot Multiple Operating Systems on the Raspberry Pi with BerryBootHow To:Set Up Kali Linux on the New $10 Raspberry Pi Zero W