Great question. In one sentence it is a purple tool, meaning both! Wireshark itself is a passive tool, it is non-intrusive — it doesn’t create attacks — but it’s a force multiplier for both Red and Blue Teams depending on who controls the capture point and how the data is used. Let me dig a […]
Is Wireshark a Red Team or Blue Team Tool? Read More »
RFMON stands for Radio Frequency MONitor mode. It is a special mode for wireless network interfaces that allows a device to capture all radio traffic it can receive on a wireless channel, regardless of the intended recipient. All Wi-Fi radios can go into different modes, but that does not mean you can make that happen.
WlanHelper.exe is a command-line tool from the Windows Driver Kit (WDK) and the folks at nmap/npcap that is used to manipulate advanced Wi-Fi driver settings, especially for testing and development. It allows you to control wireless network adapter settings such as: Do You Already Have WlanHelper? It’s possible if you have installed Wireshark with the
WlanHelper: How to Use It in Windows Read More »
So many folks use Windows and they want to capture Wi-Fi traffic in Monitor Mode (aka RFMON) using their onboard Wi-Fi adapter, and, for those of us who have tried, we all know how problematic that is. The answer as discussed in my post here is to use an external adapter. You can test this
A List of USB Wi-Fi Adapters that support Monitor Mode Read More »
How to perform reconnaissance & scanning the WLAN/Wi-Fi Network
Reconnaissance & Scanning the WLAN/Wi-Fi Network Read More »
Say it isn’t true! For the first time in the world (for me) I can put a Wi-Fi interface on a Windows 10 machine into Monitor mode!!!!! Monitor Mode in Windows At Last! I know, this is boring to a few of you because you have been capable of this. You are spoiled. You are
Monitor Mode in Windows At Last Read More »
Check out these great references as well: Our Wireless custom profile for Wireshark Our Udemy course on Wireless Packet capture Our other Wi-Fi related articles If you are like me, you count on the Internet to help with how to’s especially when using Linux. That said, sometimes the information can be contradicting or confusing. This
3 Ways to put your Wi-Fi Interface in Monitor Mode in Linux Read More »
Check out these great references as well: Our Wireless custom profile for Wireshark Our Udemy course on Wireless Packet capture Our other Wi-Fi related articles In our article on putting your WLAN Wi-Fi interface into Monitor Mode so you can sniff Wi-Fi packets and troubleshoot WLAN’s, we said that if you are running Windows, you
Getting a Virtual Machine to Access Wi-Fi Monitor Mode Read More »