aireplay-ng
Inject frames — deauth, fake auth, replay.
KaliParrothigh
pkg: aircrack-ng
aireplay-ng injects 802.11 frames; its deauth attack forces clients to reconnect so you can capture the WPA handshake.
Syntax
aireplay-ng --deauth {n} -a {bssid} {mon-iface}
Example
aireplay-ng --deauth 5 -a AA:BB:CC:DD:EE:FF wlan0mon
Sends 5 deauth bursts to the AP, knocking clients off so they re-handshake.
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
aireplay-ng IFACE
Usage examples
aireplay-ng --deauth 10 -a AA:BB:CC:DD:EE:FF wlan0mon
Deauth clients to force a handshake.
aireplay-ng --test wlan0mon
Check if the card can inject.
Advantages
- Speeds up handshake capture
- Multiple injection attacks
- Core of WPA capture workflow
Disadvantages
- Disrupts legitimate users (DoS-like)
- Clearly hostile/illegal if unauthorised
- Adapter injection support varies
Tags
#wifi#deauth#injection
Official docs: aireplay-ng ↗
Related commands
Frequently asked questions
What is aireplay-ng used for?
aireplay-ng injects 802.11 frames; its deauth attack forces clients to reconnect so you can capture the WPA handshake.
What is an example aireplay-ng command?
A common example is: aireplay-ng --deauth 5 -a AA:BB:CC:DD:EE:FF wlan0mon — Sends 5 deauth bursts to the AP, knocking clients off so they re-handshake.
Is aireplay-ng part of Kali Linux?
Yes. aireplay-ng ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install aircrack-ng.
What category of security tool is aireplay-ng?
aireplay-ng is a Wireless Attacks tool with a high-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.