Basic Operations

RDP

xfreerdp /d:sandbox(.local) /u:alex /p:'xxx' /v:10.5.5.20 +clipboard +drives /tls-seclevel:0

Reconnaissance

Network interface info: ip a

Interface details: sudo iw list

If it said "nl80211 not found." that mean we are using ieee80211 drivers. Else we are using mac80211 and the "iw list" output will print wireless card informations.

Interface's driver: sudo airmon-ng

USB ports status: sudo lsusb -vv

In-range APs: sudo iw dev wlan0 scan | egrep "DS Parameter set|SSID:"

Setup

Create & bring up virtual interface in monitor mode

sudo iw dev wlan0 interface add wlan0mon type monitor

sudo ip link set wlan0mon up

Verify the setup

sudo iw dev wlan0mon info

sudo tcpdump -i wlan0mon

Remove VIF

sudo iw dev wlan0mon interface del

sudo airmon-ng stop wlan0mon

Remote

Pre-requisite:

• SSH to remote sys

• remote sys wireless interface in monitor mode

CMD

ssh root@10.11.0.196 "sudo -S tcpdump -U -w - -i wlan0mon" | sudo wireshark -k -i -

Wireshark

Edit (ribbon) > preferences > advanced to reset default