AIRTUN-NG(8)

💖 airtun-ng(8) — the virtual tunnel interface creator for aircrack-ng 💖

okay bestie, so this is airtun-ng, and it lives in the System Manager's Manual section 8. It's giving "build your own tunnel era" and honestly? iconic. ✨

🌈 NAME 🌈

airtun-ng — a virtual tunnel interface creator for aircrack-ng 🎀

🦋 SYNOPSIS 🦋

airtun-ng [options] <interface name>

✨ DESCRIPTION ✨

So like, what does it do? airtun-ng creates a virtual tunnel interface — it's called atX — and it lets you send arbitrary IP packets by using raw ieee802.11 packet injection. That's the whole vibe. You're basically whispering IP packets into the air with 802.11 energy. no cap. 🔥

💅 OPTIONS 💅

• -H, --help — Shows the help screen. (the "bestie help me" button 🫶)
• -x <pps> — Sets the maximum number of packets per second. Pace yourself, queen. 🍓
• -a <BSSID> — Specifies the BSSID for the iee802.11 header. In WDS Mode, this sets the Receiver.
• -h <SMAC> — Specifies the source MAC for the iee802.11 header. Your ~origin story~ MAC. 🌸
• -i <iface> — Sets the capture interface.
• -r <file> — Specifies a file to read 802.11 frames from. 📖
• -y <PRGA-file> — This is the name of the file that provides the keystream for WEP encoding. Heads up bestie: no receiving, just transmitting of IP packets. It's a one-way conversation, unfortunately. 😭
• -w <WEP-key> — This is the WEP key used to en-/decrypt all traffic going through the tunnel. 🔐
• -e <ESSID> — Sets the target network SSID. Use it with -p.
• -p <passphrase> — Use this WPA passphrase to decrypt packets. Use it with -a and -e. (the squad has to be together, fr fr 🫶)
• -t <tods> — Defines the ToDS and FromDS bits in the ieee802.11 header. For tods=1, the ToDS bit is set to 1 and FromDS to 0. For tods=0, it sets them the other way around. And if you set it to 2, it will be tunneled in a WDS/bridge. Three whole moods. 💅
• -m <netmask>, --netmask <netmask> — Filters networks based on the bssid ^ netmask combination. It needs -d, and it's used in replay mode.
• -d <BSSID>, --bssid <BSSID> — Filters networks based on the <BSSID>. Used in replay mode. 🎯
• -f, --repeat — Enables replay mode. All read frames, filtered by bssid and netmask (if specified), will be replayed. it's giving rerun marathon 📺
• -s <transmitter> — Set the Transmitter MAC address for WDS Mode.
• -b — Bidirectional mode. This enables communication in Transmitter's AND Receiver's networks. Works only if you can see both stations. 👀 both of them. not just one.

🌟 EXAMPLES 🌟

Like, here's one that actually goes hard:

airtun-ng -a 00:14:22:56:F3:4E -t 0 -y keystream.xor wlan0

see how the pieces fit together? chef's kiss. 👑

👑 SEE ALSO 👑

• airbase-ng(8)
• aireplay-ng(8)
• airmon-ng(8)
• airodump-ng(8)
• airodump-ng-oui-update(8)
• airserv-ng(8)
• besside-ng(8)
• easside-ng(8)
• tkiptun-ng(8)
• wesside-ng(8)
• aircrack-ng(1)
• airdecap-ng(1)
• airdecloak-ng(1)
• airolib-ng(1)
• besside-ng-crawler(1)
• buddy-ng(1)
• ivstools(1)
• kstats(1)
• makeivs-ng(1)
• packetforge-ng(1)
• wpaclean(1)
• airventriloquist(8)

that's the whole page bestie, go forth and tunnel responsibly 💜

Version 1.7.0 — May 2022 — mwah, that's a wrap, periodt. 💅✨