How to install wireless adapter in kali VM

[Blue_bird]

Hello Everyone,

I am learning Ethical hacking. I have a home lab setup. My physical host having Windows 11 and Installed two VMs in Virtual Box : one is Kali linux and other is Metasploit.

I want practice wireless hacking lab with aircrack-ng. how can i add wi-fi feature for my kali linux. I have one usb wifi adapter which is connected to physical computer( which is already having ethernet adapter).

Help me /advice me to adding wi-fi feature to Kali machine.

Thanks

 

[CaffeineAddict]

You'll have a lot of difficulty getting wi-fi work over a VM.
PCI or USB passthrough is needed for your wi-fi adapter.
Secondly you should first verify your adapter can be put to monitor mode and can inject packets.

If you watched those YT videos about wi-fi hacking, they're very old and no longer work so don't bother, these videos were made in times when majority of people still used WEP encryption, nowdays everyone uses PSK, to brute force this you need a large GPU farm.

 

[CaffeineAddict]

learning Ethical hacking.

btw. here is a blog with random tutorials you can explore on your path:

A day with Tape

adaywithtape.blogspot.com

Cracking various things like rar or pdf files or wi-fi networks etc. is not very much a thing because it's very expensive, un-economical and boring.

Depending on what interests you and how serious you are my suggestion is to get familiar with static analysis, tools like flawfinder, rats, splint etc; there are many awesome tools like this out there that are not included in Kali, so don't limit yourself to just Kali.

metasploit which you mentioned is a solid tool, but if you look into available modules you'll notice they're several years old (some even over a decade).
Exploits that you get along with the tool have been patched long time ago, it's highly unlikely to find a machine online with those ancient bugs to compromise.
Pay attention to use most recent modules and search for servers that are somewhere on the edge.

This doesn't make the tool useless though, it only means you'll need to learn how to write your own modules and more importantly how to find bugs in software before that, that what static analysis does, or more precisely source auditing.

This is just one area that may interest you, another promising area that a lot of hackers use with success is learning about PE's and crypters.
It's useful if you want to collect a bunch of windows machines to establish a botnet.
While not ethical hacking it's worthwhile knowing how it works.

You will also want to master nmap for info gathering, having the tools is 1 thing but finding targets preceeds that.
But since you'll talking about ethical hacking this means you'll always want permission from the other side.

You can also research various repos and sign up as researcher when you feel confident, many established repos welcome researchers.
Some companies also pay if you find anything.

It's suggested to explore various areas not just one before diving deeper into something, some stuff is more interesting that other and not everything is easy as it may appear.

 

[Blue_bird]

I am new as well. I found a program that you might have to check out it is Wire shark. It can show all WiFi traffic near your location. Wireshark can be run on your win 11 side of your dual boot. I might give you cleaner data.

Thanks for the reply, I tried to install aircrack-ng on windows as well. windows security it won't allow to install the program. Since I don't want to disable security, I preffered on Kali Linux.

 

[Blue_bird]

btw. here is a blog with random tutorials you can explore on your path:

A day with Tape

adaywithtape.blogspot.com

Cracking various things like rar or pdf files or wi-fi networks etc. is not very much a thing because it's very expensive, un-economical and boring.

Depending on what interests you and how serious you are my suggestion is to get familiar with static analysis, tools like flawfinder, rats, splint etc; there are many awesome tools like this out there that are not included in Kali, so don't limit yourself to just Kali.

metasploit which you mentioned is a solid tool, but if you look into available modules you'll notice they're several years old (some even over a decade).
Exploits that you get along with the tool have been patched long time ago, it's highly unlikely to find a machine online with those ancient bugs to compromise.
Pay attention to use most recent modules and search for servers that are somewhere on the edge.

This doesn't make the tool useless though, it only means you'll need to learn how to write your own modules and more importantly how to find bugs in software before that, that what static analysis does, or more precisely source auditing.

This is just one area that may interest you, another promising area that a lot of hackers use with success is learning about PE's and crypters.
It's useful if you want to collect a bunch of windows machines to establish a botnet.
While not ethical hacking it's worthwhile knowing how it works.

You will also want to master nmap for info gathering, having the tools is 1 thing but finding targets preceeds that.
But since you'll talking about ethical hacking this means you'll always want permission from the other side.

You can also research various repos and sign up as researcher when you feel confident, many established repos welcome researchers.
Some companies also pay if you find anything.

It's suggested to explore various areas not just one before diving deeper into something, some stuff is more interesting that other and not everything is easy as it may appear.

Thanks for the reply. Thanks for the useful guidelines and letting me know that facts about kali and metasploit.

 

[MikeWalsh]

Oh, dear. Here we go.....AGAIN.

At one time, the mere mention of wanting to use aircrack-ng would have been enough to get you booted out of most communities.....because nobody is willing to be seen as endorsing such anti-social behaviour.

It's unfortunate that we have to keep re-stating this, so we try to explain the 'cons' of this particular 'choice' as best we can. Kali is NOT for beginners or the inexperienced.....it is a 'pen-testing' distro, which assumes a certain, already-achieved level of expertise and is really intended for auditing professionals. It's not a general-purpose 'daily driver'.....and the number of people we get on here who try to turn it into one - and fail big-time! - is unreal.

As m'colleague @CaffeineAddict says, most of the Kali vids floating around YouTube hark from an older, more naive time in computing....before developers got serious about security in general, and 'beefed' everything up to the 'max'. Such exploits are more trouble than they're worth now.


Mike.

 

[KGIII]

because nobody is willing to be seen as endorsing such anti-social behaviour.

We assume good faith here, unless specified otherwise. In this case, they're doing this for educational purposes with their own hardware (is what we assume).

While this is now named in the guidelines (link in my signature), this has more or less been the unspoken policy for the time I've been here.

If they say they want to hack their neighbor's wireless so they can use it as a spam relay, then we tell 'em to piss off.