airbase-ng
Create software-based wireless access points for penetration testing
TLDR
SYNOPSIS
airbase-ng [-e essid] [-c channel] [-a bssid] [options] interface
DESCRIPTION
airbase-ng is an aircrack-ng suite tool that creates software access points for penetration testing. It can simulate access points, capture WPA handshakes, perform MITM attacks, and test client security.The tool creates virtual interfaces (at0) that can be used to route traffic, enabling network analysis of connected clients.
PARAMETERS
-e essid
Access point ESSID (network name)-c channel
Operating channel-a bssid
Set the BSSID (MAC address) of the access point-W 0|1
Set the WEP flag advertised in beacons (0 = off, 1 = on; default 0)-z type
Set WPA1 cipher: 1 = WEP40, 2 = TKIP, 4 = CCMP, 5 = WEP104-Z type
Same as -z but for WPA2-P
Respond to all probe requests, including those for other ESSIDs-C seconds
Enable beaconing of probed ESSID values (used with -P), at this interval-v
Verbose output-F prefix
Write all sent and received frames to a pcap file with this prefix-I interval
Set the beacon interval in milliseconds--caffe-latte
Caffe-Latte attack mode--cfrag
PRGA attack using fragmentation
INSTALL
CAVEATS
For authorized security testing only. Requires interface in monitor mode. Creating fake access points may violate local laws if used without permission. Clients may connect and expose traffic.
HISTORY
airbase-ng is part of the aircrack-ng suite, which evolved from aircrack in the mid-2000s. It was developed to test wireless security by simulating various access point scenarios.
SEE ALSO
aircrack-ng(1), airmon-ng(1), aireplay-ng(1), airodump-ng(1), airtun-ng(1), airdecap-ng(1)