I'm quite familiar on the aircrack-ng suite and I was wondering if there is a way to stop airodump-ng mon0
from seeing my client's MAC IDs? This is very sensitive information a program can get without even being connected to the AP. How is this possible exactly for the software to find without being connected?
On the second part (a very irritating fact) people use the macchanger -r
or -m mon0
command to spoof their MAC making it nearly impossible to track in wireshark or anything, but the router sees right past the faked MAC and shows the actual even when spoofed. Why is that and could an attacker hide a real MAC when connecting to a wireless access point?
Lastly how can I stop or prevent (make it harder) to execute a (DDoS) deauth packets? aireplay-ng -0 -0 -a [AP_MAC] -c [CLIENT_MAC] --ignore-negative-one mon0
This command can cause serious problems with denial of service on clients.
I have heard a couple things about changing the channel to something high but it gets into legal issues and other things with antennas.