Wi-Fi monitor mode
Managed mode
- Used if we want the interface to act as a client or station.
- Normally the default interface mode
ifconfig <interface> down
iwconfig <interface> mode managed
iwconfig <interface> essid <essid>
Ad-hoc Mode
- Used for AP-AP communications
- Allows the wireless interfaces to communicate to each other
iwconfig <interface> mode ad-hoc
iwconfig <interface> essid <essid>
Master mode
- The device acts as an AP
- Useful for deploying a Rogue AP or Evil Twin attack
- Requires a management daemon
- Commonly use hostapd for this
#Open.conf file
interface=<interface>
driver=nl80211
ssid=<SSID name>
channel=2
hw_mode=g
hostapd open.conf
Mesh mode
- Interface participates in a mesh network with routing between nodes
iw dev <interface> set type mesh
Monitor mode
- Network interface can capture all wireless traffic in range.
- Requires Sudo privileges
- Not all chipset support monitor mode
ifconfig <interface> down
iw <interface> set monitor control
ifconfig <interface> up
airmon-ng start <interface>
- iwconfig will show Mode:Monitor if it is in monitor mode.