This presentation is about a tool in kali linux named as Mdk3, it is a penetration testing tool.

1. Mdk3 Tool in Kali Linux
Presented by:
Muhammad Zohaib Shah Khagga

2. Introduction
• MDK3 stands for Murder Death Kill 3.
• MDK is a proof-of-concept tool to exploit common
IEEE 802.11 protocol weaknesses.
• It is your responsibility to make sure you have
permission from the network owner before running
MDK against it.

3. Getting started with mdk3
• As a prerequisite, make sure your wireless adapter is
in packet injecting mode, otherwise this won’t work
right at all.
• To put the wifi adapter into packet injecting mode
use the syntax below to get an idea:
• “airmon-ng start <wireless interface>”
• You can get help by typing “mdk3 –fullhelp”

4. Mdk3 Purposes..
• SSID Flooding with Mdk3
• Authentication Flooding with mdk3
• De-authentication Flooding with mdk3

5. SSID Flooding with Mdk3
• One neat trick that MDK3 can do is SSID flooding, or
beacon flooding
• MDK3 can broadcast hundreds or even thousands of
fake access points
• SSID flooding is not denial of service
• You could, in effect, hide your legitimate wireless access
point in a sea of fake access points

6. 1. SSID Flooding with Mdk3 cont…
• Here is the syntax to enable simple SSID flooding (MDK3
will generate random fake access point names)
• “mdk3 <interface> b -c 1”
• Just replace <interface> with the name of your wireless
interface. Remember, usually it’s mon0
• The b option tells MDK3 to use beacon/SSID flooding
mode
• -c1 tells MDK3 to broadcast all the fake access points
on channel 1

7. 2. Authentication Flooding with Mdk3
• The idea behind authentication flooding is simple
• Too many authentication requests at one time may
cause the wireless access point to freeze up and
perhaps stop working entirely
• Authentication flooding doesn’t always work
• A simple command to do authentication flooding is:
“mdk3
<interface> a -a <ap_mac address>”

8. 2. Authentication Flooding with Mdk3 cont…
• All you need is the AP’s(Access Point) MAC address
• a Authentication DoS mode
(Send authentication frames to all APs found in
range)
• -a <ap_mac address>
(You need the access point’s MAC address, which
can be obtained with airodump)
• -m (Use a valid client MAC from OUI database)

9. 2. Authentication Flooding with Mdk3 cont…
• -c (Don’t check that the test was successful, just run
the attack)
• -i <ap_mac> (Performs an intelligent test on the
access point (-a and -c will be ignored). This test
connects clients to the AP and reinjects sniffed data
to keep them alive)
• -s <pps> (Sets the speed in packets per second)

10. 3. De-Authentication Flooding with Mdk3
• The DoS WiFi hacking technique that works best
uses deauthenticate requests rather than faking
authentication requests
• “mdk3 <interface> d -b blacklist_file”
• The only thing you need is the target access point’s
MAC address. Save that MAC address in a text file
and specify it after the -b option

11. 3. De-Authentication Flooding with Mdk3 cont…
• d – Deauthentication / Disassociation Amok Mode Kicks
everybody found from AP
• -w <filename> Read file containing MAC addresses to
ignore (Whitelist mode)
• -b <filename> Read from a file containing MAC
addresses to attack (Blacklist Mode)
• -s <pps> Set the speed in packets per second (Default:
unlimited)
• -c [chan,chan,chan,...] Enables channel hopping.
Without providing any channels, mdk3 will hop all
channels until it finds the target you specified

12. Refrences
• http://ironkali.blogspot.com/2014/03/tutorial-how-
to-ddos-wifi-with-mdk3.html
• https://tools.kali.org/wireless-attacks/mdk3
• https://svn.mdk3.aircrack-
ng.org/mdk3/docs/Documentation_incomplete.html

13. Thank You!
No Question please