TP-Link T2U Plus (RTL8821AU) #236
Comments
|
RTL8821AU driver is not part of the Linux stock kernel (like mt76 driver). My rating is 0! My recommendation: |
|
An example: TP-Link T2UH |
|
Thank you for answering my question. Are any commands completely compromised by these alternative models? |
|
Regarding that this devices are cheap, yes. Do you have an Alfa AWUS036ACHM? |
|
Get some more information here: |
No, I want to purchase one but was thinking of trying with a cheaper one first.
Unfortunately none of them are offered by local vendors, and the international delivery cost is nearly half or equal to the cost of the adapter. The market is full of Comfast and TP-Link adapters such as: I might just go for the AWUS036ACHM because of its positive reputation but it would be nice to know other great products that can be purchased easily as needed. |
|
For the first steps a cheap adapter running a mt7601U should do it. An AWUS036ACHM is a real beast. It is able to retrieve hundreds of hashes (EAPOL MESSAGEPAIRs and PMKIDs) in a very short time. For a penetration tester, it should be the best choice. For comparison: ASUS AC51 Big difference between external antenna (ALFA) and onboard antenna (ASUS). |
|
ASUS AC51 information: Do not wonder about the MAC addresses - hcxlabtool is running its own MAC address pool. |
|
Even the cheapest mt76 adapter support active monitor mode: Do not trust the TX power reported by the driver. Mostly it is less (much less) than reported. Monitor mode can be set by a simple command (ifconfig, iwconfig, ip, iw are obsolete): |
|
@morrownr how about adding an information about "active monitor mode" and its (huge) advantage to USB-WiFi? |
|
It would be great to have a list of chipsets and drivers that are supporting active monitor mode, as there may be more options available beyond the ones mentioned in the #73 (mt7921, mt7612u, mt7610u, mt7601u). Do these mentioned USB adapters work with Android phones? |
|
I agree, it would be great to have all this additional information on USB-WiFi. |
|
Unfortunately public information about active monitor mode is very rare. As far as I know, only mt76 drivers provide this feature. |
Let's make it more public.
My bet is that all in-kernel drivers support it because it is probably supported in the stack the in-kernel drivers use. I can test an Atheros adapter later... and maybe some Ralink adapters. |
|
I fully agree since we have this attribute in linux/nl80211.h Realtek drivers could be the next ones providing active monitor. |
|
If you take a look at the injection radiotap header of hcxlabtool: If we request a PMKID from an ACCESS POINT (AP) while running monitor mode, it is mandatory that we ACK the frames coming from the AP. If not, the AP will deauthenticate us. Additional it is mandatory that we resend a frame, if the AP doesn't ACK the frame we have sent. |
|
@morrownr , while hunting for a bug on rtl8xxxu, we discussed active monitor mode, too: |
|
It would be nice if a feature request went in for the rtw88 driver as well. I was testing the rtw88 on a rtl8812bu based adapter this morning with kernel 6.3. The performance and stability has increased a lot since 6.1. Heck, it is usable now. |
|
For sure, it will be and I can confirm your experience regarding rtw88. |
Thank you for updating the information and being the main source of WiFi adapters for Linux. The TP-Link T2U Plus is widely available in many countries with a very affordable price for beginners in pentesting. Though TP-Link products support for Linux is terrible and their chipset confusion is the second downside to it, I'm curious to know your thoughts about TP-Link T2U Plus. Being "Alfa AWUS036ACHM" 10 out of 10, how do you rate other cheap/affordable alternative products for pentesting (based on full/missing features, handshake catching, long range, etc)? If managing challenging circumstances of compiling the proper driver is okay, what are the better options under $20 for pentesting?
The text was updated successfully, but these errors were encountered: