airbase-ng

airbase-ng [-e essid] [-c channel] [-a bssid] [options] interface

airbase-ng is an aircrack-ng suite tool that creates software access points for penetration testing. It can simulate access points, capture WPA handshakes, perform MITM attacks, and test client security.The tool creates virtual interfaces (at0) that can be used to route traffic, enabling network analysis of connected clients.

-e essid

Access point ESSID (network name)

Operating channel

Set the BSSID (MAC address) of the access point

Set the WEP flag advertised in beacons (0 = off, 1 = on; default 0)

Set WPA1 cipher: 1 = WEP40, 2 = TKIP, 4 = CCMP, 5 = WEP104

Same as -z but for WPA2

Respond to all probe requests, including those for other ESSIDs

Enable beaconing of probed ESSID values (used with -P), at this interval

Verbose output

Write all sent and received frames to a pcap file with this prefix

Set the beacon interval in milliseconds

Caffe-Latte attack mode

PRGA attack using fragmentation

For authorized security testing only. Requires interface in monitor mode. Creating fake access points may violate local laws if used without permission. Clients may connect and expose traffic.

airbase-ng is part of the aircrack-ng suite, which evolved from aircrack in the mid-2000s. It was developed to test wireless security by simulating various access point scenarios.

aircrack-ng(1), airmon-ng(1), aireplay-ng(1), airodump-ng(1), airtun-ng(1), airdecap-ng(1)

Source code · Homepage · Documentation