Scan for networks:
/System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport en1 scan
Sniff:
sudo /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport sniff
Create a symbolic link to the binary so you can easily execute it from your path if you wish.
Resultant sniff will dump the *.cap file in /tmp. Use aircrack-ng to crack the cap file now once you've captured enough IVs and/or handshake.
How do I go about stopping the sniffing and reconnect to an, albeit, crappy unprotected network? This is a really useful tool but I need to be able to turn it off so that I can get online. Thanks!
ReplyDeleteYou can restart your computer. Sniffing mode will be off then
ReplyDeleteCricket - you can also command+c to cancel the sniffing. It takes some 10-20 seconds to stop. I believe you can also actively kill -9 the process.
ReplyDeleteps ax & kill-9 process id ,as Liuser said.
ReplyDeleteIt doesn’t created the .cap file
ReplyDelete