how to use mdk4?

mdk4 Description

MDK is a proof-of-concept tool to exploit common IEEE 802.11 protocol weaknesses.

MDK4 is a new version of MDK3.

MDK4 is a Wi-Fi testing tool from E7mer of 360PegasusTeam, ASPj of k2wrlz, it uses the osdep library from the aircrack-ng project to inject frames on several operating systems.

Features

Homepage: https://github.com/aircrack-ng/mdk4

Author: E7mer

License: GPLv3

MDK USAGE:

There are 9 attack modules, they are denoted by a single letter.

ATTACK MODE b: Beacon Flooding

Sends beacon frames to show fake APs at clients. This can sometimes crash network scanners and even drivers!

ATTACK MODE a: Authentication Denial-Of-Service

Sends authentication frames to all APs found in range. Too many clients can freeze or reset several APs.

ATTACK MODE p: SSID Probing and Bruteforcing

Probes APs and checks for answer, useful for checking if SSID has been correctly decloaked and if AP is in your sending range. Bruteforcing of hidden SSIDs with or without a wordlist is also available.

ATTACK MODE d: Deauthentication and Disassociation

Sends deauthentication and disassociation packets to stations based on data traffic to disconnect all clients from an AP.

ATTACK MODE m: Michael Countermeasures Exploitation

Sends random packets or re-injects duplicates on another QoS queue to provoke Michael Countermeasures on TKIP APs. AP will then shutdown for a whole minute, making this an effective DoS.

ATTACK MODE e: EAPOL Start and Logoff Packet Injection

Floods an AP with EAPOL Start frames to keep it busy with fake sessions and thus disables it to handle any legitimate clients. Or logs off clients by injecting fake EAPOL Logoff messages.

ATTACK MODE s: Attacks for IEEE 802.11s mesh networks

Various attacks on link management and routing in mesh networks. Flood neighbors and routes, create black holes and divert traffic!

ATTACK MODE w: WIDS Confusion

Confuse/Abuse Intrusion Detection and Prevention Systems by cross-connecting clients to multiple WDS nodes or fake rogue APs.

ATTACK MODE f: Packet Fuzzer

A simple packet fuzzer with multiple packet sources and a nice set of modifiers. Be careful!

FULL OPTIONS:

This version supports IDS Evasion (Ghosting). Just append --ghost ,, after your attack mode identifier to enable ghosting!

NOTE: Does not fully work with every driver, YMMV…

This version supports IDS Evasion (Fragmenting). Just append --frag ,, after your attack mode identifier to fragment all outgoing packets, possibly avoiding lots of IDS!

NOTE: May not fully work with every driver, YMMV…

HINT: Set max_frags to 0 to enable standard compliance

If you received a message when launching an attack:

This means that you need to stop programs that can use the wireless interface, and also put your wireless adapter into monitor mode.

To stop interfering processes:

To switch to monitor mode, use the following commands:

For example, to put the wlo1 interface into monitor mode:

The ‘Beacon Flooding’ attack (b) (creates the appearance of the presence of many fake access points) on the wireless interface (wlo1), while also using non-printable characters in the generated SSID and creating SSIDs that break the 32-byte limit (-a) with valid MAC access points from the embedded OUI database (-m) and send packets at a speed of 500 packets per second (-s 500):

Installation on Kali Linux

Installation on BlackArch

Installation on Linux (Debian, Mint, Ubuntu)

The result of the b attack:

For more information about how attacks work, see the mdk3 help.

MDK4 is a Wi-Fi testing tool from E7mer of 360PegasusTeam, ASPj of k2wrlz, it uses the osdep library from the aircrack-ng project to inject frames on several operating systems. Features support two WiFi card (one for receiving data, another for injecting data). Supports block the specified ESSID/BSSID/Station MAC in command option. Supports both 2.4 to 5GHz (Linux). Supports IDS Evasion (Ghosting, Fragmenting, does not fully work with every driver). Supports packet fuzz testing.

Procedure:

1. Open terminal in Kali Linux. Type “cd mdk4”. Press Enter.

2. Type “make”. Press Enter.

3. Type “sudo make install”. Press Enter.

4. Type “mdk4 wlan0 d -c 2”. Press Enter.