How to Hack WPA/WPA2 WiFi Using Kali Linux (For Educational Purposes)

Disclaimer: This guide is strictly for educational purposes and ethical hacking. Hacking into networks without authorization is illegal and punishable by law. The goal is to test and improve the security of your own WiFi network.

WiFi security is a crucial aspect of cybersecurity. While WPA/WPA2 encryption is generally secure, vulnerabilities can be exploited if weak passwords are used. Ethical hackers and penetration testers use Kali Linux to assess network security and identify weak points.

In this guide, we will explore how to test a WiFi network’s security using Kali Linux.

Prerequisites

Before starting, ensure you have the following:

Kali Linux (installed on a system or running live)
A compatible WiFi adapter that supports packet injection (e.g., Alfa AWUS036NHA, TP-Link TL-WN722N v1)
Basic knowledge of Linux commands
Permission to test the WiFi network

Step 1: Set Up Your Wireless Adapter

To perform WiFi penetration testing, your adapter must support monitor mode and packet injection.

Open a terminal in Kali Linux.
Check your network interfaces by running:
iwconfig
If your adapter is listed, enable monitor mode:
airmon-ng start wlan0
Replace wlan0 with your adapter’s interface name.

Step 2: Scan for Available WiFi Networks

Now that your adapter is in monitor mode, scan for nearby networks.

airodump-ng wlan0mon

This will display a list of available networks, along with their BSSID (MAC address), channel, and encryption type.

Step 3: Capture the Handshake

To crack a WPA/WPA2 password, you need to capture the handshake that occurs when a device connects to the network.

Choose a target network and note its BSSID and channel.
Start capturing packets on that channel:
airodump-ng -c <channel> –bssid <BSSID> -w handshake wlan0mon
Replace <channel> and <BSSID> with the target’s details.
Wait for a device to connect. If no devices are connecting, you can force a deauthentication attack:
aireplay-ng -0 5 -a <BSSID> wlan0mon
This will disconnect devices, forcing them to reconnect and generate a handshake.

Step 4: Verify the Handshake Capture

Once you have captured the handshake, verify it using:

aircrack-ng handshake.cap

If the handshake is captured, proceed to cracking.

Step 5: Crack the WiFi Password

Use a dictionary attack to crack the WPA/WPA2 password:

aircrack-ng -w /path/to/wordlist.txt -b <BSSID> handshake.cap

Replace /path/to/wordlist.txt with a wordlist such as rockyou.txt. If the password is in the wordlist, aircrack-ng will reveal it.

Step 6: Strengthening WiFi Security

If your password was cracked, it’s a sign that your network is vulnerable. Follow these steps to enhance security:

Use a strong, complex password with letters, numbers, and symbols.
Enable WPA3 if supported.
Disable WPS, as it can be exploited.
Use MAC address filtering.
Keep firmware updated.

Conclusion

This guide demonstrated how ethical hackers and security professionals test WiFi security using Kali Linux. The goal is to highlight vulnerabilities and help users secure their networks. Always perform penetration testing with proper authorization to avoid legal consequences.

By following best security practices, you can protect your network from unauthorized access and cyber threats.

You may also like: