FishermansEnemy

I had a nice surprise waiting for me when I got back from Bsides London (Awesome), DC4420 (Frighteningly awesome) and Infosec2011 (Mostly lame). The final piece of my WiFi auditing kit had arrived. I now have the Alfa AWUS051NH, 2.4GHz directional antenna  & 5GHZ directional antenna.

[caption id="attachment_205" align="alignleft" width="300" caption="5GHz Antenna, 2.4GHz Antenna and Alfa AWUS051NH USB network adapter"][/caption]

I've been playing with it for about a week and I will be writing up a detailed guide to getting it going in BT4R2 in a few days, hopefully it will work just the same in BT5. In the mean time some thoughts about it so far. It pretty much works out of the box with BT4R2, just use airmon-ng to put the interface into monitor mode *and* use ifconfig to bring the interface up (I've just saved you half an hour of wondering why you're not seeing any packets, you can thank me later) and in the packets flood.

As airmon-ng gives you a separate interface for sniffing you can still do packet injection using the "normal" interface, I've tested this and it seems to work fine, good for getting those weak IVs from WEP APs.

Having a good look at the 5GHz antenna I don't think it is going to work for what I need. The range on the device is a very narrow 5.7 - 5.8GHz which does not cover all of the channels that could be used by 802.11a and 802.11n. Looking around for a directional antenna that does cover these frequencies (5.1-5.8Gz) I don't think I am going to be able to source a man portable solution for this. Time for some more research in this area.

Directionality on the 2.4GHz is there, however inside a building you do get signals from your AP through the whole 360 degrees. There is a definite higher strength signal in the physical direction of the AP but it is not as obvious as I would have thought. More on this is the full write up, and some external testing with the 2.4 as well.