Wi-fi devices for hacking

You can easily find lists of chipsets that support packet injection mode on many websites and forums in Internet, but we would recommend you first get familiar with the manuals written by the Aircrack-ng team at their website:

• http://www.aircrack-ng.org/doku.php?id=compatible_cards
• http://www.aircrack-ng.org/doku.php?id=compatibility_drivers

In our experience, the most popular suitable chipsets are as follows:

• Atheros AR9271
• Ralink RT3070
• Ralink RT3572
• Realtek 8187L

If you don't want to spend time on comparing various Wi-Fi interfaces and their parameters, we can recommend our favorites from the company Alpha Network:

• Alfa AWUS 036 H on RTL8187 chipset
• Alfa AWUS 036 NHR (v.2) on RTL8188RU chipset

TP-Link TP-WN722N is a very good USB dongle interface. You can see all those three interfaces in the following image:

Our "workhorses" for Wi-Fi pentesting

If you already have a Wi-Fi interface and you are not sure if it supports the packet injection mode, you can test it with the Aircrack-ng suite using the following manual:

http://www.aircrack-ng.org/doku.php?id=injection_test

The registry - where to find where I was connected - Wireless

Alex wants to determine whether the user of a company-owned laptop accessed a malicious wireless access point. Where can he find the list of wireless networks that the system knows about?

1. The registry
2. The user profile directory
3. The wireless adapter cache
4. Wireless network lists are not stored after use.

The Windows registry stores a list of wireless networks the system has connected to in the registry under HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\NetworkList\Profiles. This is not a user-specific setting and is stored for all users in LocalMachine.