airmon-ng is a script within the Aircrack-ng suite used to manage wireless interface modes on Linux. Its primary purpose is to enable Monitor Mode on a wireless network card, allowing it to capture packets it isn’t specifically addressed to (eavesdropping on the “air”).
Since you’ve recently set up your ASUS laptop with Linux for a pentesting lab, this tool is the gateway to any wireless auditing or “Wi-Fi hacking” you might do.
Key Capabilities
-
Enable/Disable Monitor Mode: It switches your card from “Managed” mode (connecting to an AP) to “Monitor” mode (sniffing traffic).
-
Interference Management: It can identify and kill background processes (like
NetworkManagerorwpa_supplicant) that might try to force your card back into Managed mode while you’re trying to scan. -
Interface Information: Running it without arguments lists your available wireless interfaces, their chipsets, and their current drivers.
Common Commands for your Lab
| Command | Action |
|---|---|
sudo airmon-ng | Lists all wireless interfaces and their status. |
sudo airmon-ng check | Lists processes that might interfere with monitor mode. |
sudo airmon-ng check kill | Kills all interfering processes (Highly recommended before starting). |
sudo airmon-ng start wlan0 | Puts the interface wlan0 into monitor mode (often renames it wlan0mon). |
sudo airmon-ng stop wlan0mon | Disables monitor mode and returns the card to its original state. |
| vulnerabilityscanning WirelessSecurity attacks wifihacking |