> I am using mdk3 in BackTrack 4 (Final) however cannot get MAC bruteforcing > to work. > > My test lab is a simple router, No encryption set, and with mac filtering > enabled. > > Using the normal; > > ./mdk3 mon0 f -t <AP Mac> > > Does not seem to change the mac address it is trying and testing 0 MACs per > second and 10 retries Answer; ===== Seems like your router is not 802.11 compliant. In the official standard, a client who wants to join the network sends an auth request providing the data for the AP to check if this new client is ok to join. The AP answers to this client with an auth response which either specifies success or failure and also contains an error code to explain why the client couldn't join. MAC filtering is NOT standard 802.11, so there is NO error code saying: "Sorry, can't join, you got the wrong MAC!" However, EVERY failure has to be reported to the client, and for this cases, the AP may use a special error code: "Denied due to reason outside the standard" Another option would be using a reserved error code: http://www.gthill.com/managementframes.pdf In your case, your router seems to just IGNORE auth requests if they came from an unauthorized MAC, and it doesn't respond with anything. But current mdk3 implementation only works for 802.11 compliant routers who correctly deny authentication. iar cel care a dat reply este autorul softulului mdk3