Skip to content
HackIndex.io

OSWP · Module 5

Linux Wireless Stack and Tools

Configure the Linux wireless stack: pick a capable adapter, manage drivers, and enable monitor mode for capture and injection.

~1 h 3 resources Last updated September 27, 2026

Every wireless attack depends on a correctly configured adapter and driver. PEN-210 covers the Linux wireless stack: how the kernel exposes wireless interfaces, which chipsets and drivers support monitor mode and packet injection, and the tooling to manage them. Getting this foundation right is the difference between a working capture and hours of troubleshooting, and the exam provides an adapter you must drive competently from the command line.

Wireless Adapters and Drivers

Not every adapter can attack: you need a chipset whose driver supports monitor mode and injection. Choosing suitable hardware, loading and reloading the right driver, unblocking a soft/hard-blocked radio with rfkill, and fixing injection after a driver load are the practical skills here. Adapters like those built on the RTL8812AU need a manually installed driver, and running inside a VM adds USB pass-through considerations.

Monitor Mode

Monitor mode puts the adapter into a state where it captures all 802.11 frames in the air, not just those addressed to it, and is required for scanning, capturing handshakes, and injection. Enabling it with airmon-ng (killing interfering processes first) or manually with iw, locking to a specific channel, verifying it is active, and disabling it cleanly afterward are the core operations every later module builds on.

Read

The core material for this module. Where a guide goes deeper than needed, the relevant sections are highlighted.