1AIRTUN-NG(8)                System Manager's Manual               AIRTUN-NG(8)
2
3
4

NAME

6       airtun-ng - a virtual tunnel interface creator for aircrack-ng
7

SYNOPSIS

9       airtun-ng [options] <interface name>
10

DESCRIPTION

12       airtun-ng  creates  a  virtual tunnel interface (atX) for sending arbi‐
13       trary IP packets by using raw ieee802.11 packet injection.
14

OPTIONS

16       -H, --help
17              Shows the help screen.
18
19       -x <pps>
20              Sets maximum number of packets per second.
21
22       -a <BSSID>
23              Specifies the BSSID for the iee802.11 header. In WDS  Mode  this
24              sets the Receiver.
25
26       -h <SMAC>
27              Specifies the source MAC for the iee802.11 header.
28
29       -i <iface>
30              Sets the capture interface.
31
32       -r <file>
33              Specifies a file to read 802.11 frames.
34
35       -y <PRGA-file>
36              Is  the  name  of the file, which provides the keystream for WEP
37              encoding. (No receiving, just transmitting of IP packets.)
38
39       -w <WEP-key>
40              This is the WEP key to en-/decrypt all traffic going through the
41              tunnel.
42
43       -e <ESSID>
44              Sets the target network SSID (use with -p).
45
46       -p <passphrase>
47              Use this WPA passphrase to decrypt packets (use with -a and -e).
48
49       -t <tods>
50              Defines  the  ToDS  and FromDS bit in the ieee802.11 header. For
51              tods=1, the ToDS bit is set to 1 and FromDS to 0,  while  tods=0
52              sets them the other way around. If set to 2, it will be tunneled
53              in a WDS/bridge.
54
55       -m <netmask>, --netmask <netmask>
56              Filters networks based on bssid ^ netmask combination. Needs -d,
57              used in replay mode.
58
59       -d <BSSID>, --bssid <BSSID>
60              Filters networks based on the <BSSID>. Used in replay mode.
61
62       -f, --repeat
63              Enables replay mode. All read frames, filtered by bssid and net‐
64              mask (if specified), will be replayed.
65
66       -s <transmitter>
67              Set Transmitter MAC address for WDS Mode.
68
69       -b     Bidirectional mode. This enables communication in  Transmitter's
70              AND  Receiver's  networks.  Works  only if you can see both sta‐
71              tions.
72

EXAMPLES

74       airtun-ng -a 00:14:22:56:F3:4E -t 0 -y keystream.xor wlan0
75

SEE ALSO

77       airbase-ng(8)
78       aireplay-ng(8)
79       airmon-ng(8)
80       airodump-ng(8)
81       airodump-ng-oui-update(8)
82       airserv-ng(8)
83       besside-ng(8)
84       easside-ng(8)
85       tkiptun-ng(8)
86       wesside-ng(8)
87       aircrack-ng(1)
88       airdecap-ng(1)
89       airdecloak-ng(1)
90       airolib-ng(1)
91       besside-ng-crawler(1)
92       buddy-ng(1)
93       ivstools(1)
94       kstats(1)
95       makeivs-ng(1)
96       packetforge-ng(1)
97       wpaclean(1)
98       airventriloquist(8)
99
100
101
102Version 1.6.0                    January 2020                     AIRTUN-NG(8)