Wireless Frame Injection: Performing Deauthentication Audits

Wireless frame injection occurs when a network card sends crafted 802.11 management frames into the air without authenticating first.

1. Checking Injection Support

Before beginning an audit, verify that your wireless chipset supports frame injection:

aireplay-ng -9 wlan0mon

2. Sending Deauthentication Frames

To verify if a client is vulnerable to connection drops, send spoofed deauth management frames:

aireplay-ng -0 10 -a 00:11:22:33:44:55 wlan0mon

The client disconnects immediately because standard 802.11 management frames are unencrypted and easily spoofed.

3. Remediation

Enable **Protected Management Frames (PMF)** inside your router settings to encrypt these management signals.