Selecting the right network security equipment is the foundation upon which successful pentesting is built. Unlike standard home use, where almost any USB dongle will do, Kali Linux Hardware requirements are significantly more stringent. Standard adapters that work fine in Windows for watching videos or surfing the web often prove useless when trying to run a wireless network audit.
The main difficulty lies in the device's chipset, not the brand printed on the case. It is the chipset that determines whether the network card can switch to the mode. monitor or support packet injectionsIf you're new to the world of information security, finding the right hardware can seem like a confusing maze of technical specifications and incompatible drivers.
In this article, we'll explore what exactly to look for when purchasing a device, which chipsets are considered the industry gold standard, and how to test your existing device. Understanding these nuances will save you hours of troubleshooting and allow you to focus on learning the tools rather than struggling with the hardware.
Selection criteria: monitor and injection mode
The first and most important criterion is support for monitor mode. In normal mode, the Wi-Fi adapter ignores all packets not addressed to it, accepting only those destined for its MAC address. Monitor Mode allows the map to capture all traffic within range, regardless of the recipient. Without this feature, tools like Airodump-ng surrounding networks simply won't see it.
The second critical parameter is packet injection capability. This is the adapter's ability not only to listen to the air but also to send specially crafted frames into the network. This feature is necessary for attacks on the WPA/WPA2 handshake or for deauthenticating clients. Most low-cost adapters based on Broadcom chips or older Realtek chips lack this capability at the driver level.
⚠️ Note: Monitor mode support in Windows and Linux are different. Even if the adapter works in monitor mode in Windows using special utilities, it may be completely useless in Linux due to the lack of open-source drivers.
When choosing a device, always look for confirmation of support specifically for the Linux environment. Manufacturers often only list compatibility with Windows, which is a red flag for pentesting purposes. You need a device that natively or through compiled drivers works with the stack. mac80211 in the Linux kernel.
It's also worth paying attention to the frequency range. Modern networks are rapidly migrating to 5 GHz, so dual-band adapters (2.4 GHz and 5 GHz) are becoming the standard. However, for training and working with older equipment, 2.4 GHz support remains mandatory.
Chipsets: The Heart of Your Adapter
The most common mistake newbies make is choosing an adapter based on brand. You can buy an expensive adapter from a manufacturer, but if it contains an unsupported chip, it won't work in Kali. Conversely, a cheap adapter with the right chipset can be a powerful tool in the right hands. The market is dominated by a few chip manufacturers whose drivers are well-known in the community.
The undisputed leader is Atheros (now part of Qualcomm). Their chips, such as AR9271, AR9380 And QCA9377, have excellent support in the Linux kernel out of the box. They're stable, support all necessary features, and rarely require installation hassles. For a beginner, this is the safest choice.
Second place goes to adapters based on Realtek chips. The situation here is ambiguous. Older models RTL8187L are legendary for their stability, but they only operate in the 2.4 GHz band and are slow. New chips, such as RTL8812AU or RTL8814AU, support the AC standard and the 5 GHz band, but often require manual driver compilation, as they are not part of the main Linux kernel.
- 🔹 Atheros AR9271 — a classic for 2.4 GHz, works immediately, ideal for beginners.
- 🔹 Realtek RTL8812AU - an excellent choice for 5 GHz, but requires driver installation.
- 🔹 MediaTek MT7921AU — a modern chip with Wi-Fi 6 support that is gaining popularity.
- 🔹 Ralink RT3070 — an old but reliable chip for budget solutions.
ℹ️ Driver and kernel version compatibility information is constantly updated by the developers. Before purchasing a specific chipset, it's a good idea to check the latest drivers in the GitHub repositories or the official Kali Linux documentation, as support for older models may be removed from new kernel versions.
There are also chips from Broadcom and Intel. With Intel, the situation is paradoxical: excellent drivers for normal operation, but packet injection is almost completely impossible due to proprietary firmware. Broadcom has historically been difficult to configure under Linux, although the situation has improved in recent years with the advent of open-source drivers. bcma And brcmfmac.
Check compatibility before purchasing
Before placing an order online, it's important to conduct thorough research. Don't blindly trust product descriptions on marketplaces, where sellers often copy specifications from each other or write "compatible with Kali" to sell. Your task is to find the exact device model and check it on forums or knowledge bases.
Use search queries specifying your specific chipset and the phrase "Kali Linux monitor mode injection." If you find numerous driver installation guides and reports of successful use, that's a good sign. However, if the information is scant or dates back to 2015, it's worth considering.
Hidden adapter models
Some adapters are sold under different names but have the same internals. For example, Alfa Network adapters often use Atheros or Realtek chips. Knowing the chip model, you can find a compatible driver even for an unknown brand.
Pay attention to the connection interface. Adapters with an external antenna connector are better for stationary testing. This allows you to connect a high-gain antenna or a directional antenna for long-range coverage. Built-in antennas in compact USB dongles often have an extremely weak signal.
Wi-Fi standards are also worth considering. For modern tasks, support for 802.11ac (Wi-Fi 5) or 802.11ax (Wi-Fi 6) is desirable. This will ensure not only high data transfer speeds but also the ability to test the security of modern networks. However, keep in mind that older clients may not support newer standards, so versatility is important.
Top Popular Penetration Testing Models
The market has developed a list of models that have proven their effectiveness over the years. The company's products have long been the leader. Alfa Network. Their adapters, such as AWUS036NHA (on Atheros chip) or AWUS036ACH (based on a Realtek chip) are considered the benchmark. They feature a robust case, an external antenna connector, and guaranteed operation in Kali.
Another popular brand is Panda Wireless. Their model PAU09 The Ralink RT3572 chip works great in monitor mode. Adapters from TP-Link, but you need to be extremely careful here. The same model number (for example, TL-WN722N) can have completely different chips in different revisions. Version v1 worked perfectly, but v2 and v3 had compatibility issues.
| Model | Chipset | Range | Difficulty of setup |
|---|---|---|---|
| Alfa AWUS036NHA | Atheros AR9271 | 2.4 GHz | Low (works immediately) |
| Alfa AWUS036ACH | Realtek RTL8812AU | 2.4 / 5 GHz | Medium (driver required) |
| Panda PAU09 | Ralink RT3572 | 2.4 GHz | Low |
| TPLink Archer T4U | Realtek RTL8812AU | 2.4 / 5 GHz | Average (depending on revision) |
When choosing a specific model, always check the hardware revision (v1, v2, v3). Manufacturers often change the internal hardware without changing the model name, which can lead to purchasing a device that doesn't work in Kali. Look for reviews of the specific version you plan to purchase.
Driver installation and diagnostics
After purchasing an adapter, the first thing you need to do is make sure the system recognizes it. In Kali Linux, you can use the utility lsusbRun the command in the terminal and find your device in the list. If it appears, the physical connection was successful.
lsusbNext, you need to check if the correct driver is loaded. The command iwconfig or ip link will show network interfaces. If your adapter is detected as wlan0 (or wlan1), try switching it to monitor mode. To do this, use airmon-ng.
sudo airmon-ng start wlan0If a new interface (e.g., wlan0mon) appears after running the command, the adapter supports monitor mode and the driver is working correctly. If you receive an error stating that the device does not support this operation, the driver is likely not loaded or the chipset is incompatible.
☑️ Checking the adapter in Kali Linux
For Realtek chips that aren't included in the kernel, manual driver installation may be required. This is often done through a package manager. apt or by compiling from source on GitHub. Make sure you have the kernel headers installed (linux-headers) and compiler build-essential.
⚠️ Important: When manually compiling drivers, always back up your system files. An error during installation may result in network instability or an inability to boot the system.
Compatibility issues and their solutions
Even with the right adapter, problems can arise. A common issue is driver conflicts. Standard drivers may be active in the system, blocking specialized utilities. In such cases, it's necessary to blacklist (disable) the standard kernel modules.
Another issue is USB port power. High-power adapters with external antennas can draw more current than a USB 2.0 port can handle. This leads to constant reconnections or complete device failure. The solution is to use a powered USB hub with external power.
It's also worth keeping virtualization in mind. If you're running Kali Linux in VirtualBox or VMware, USB device forwarding may not work correctly. Virtual machines often have poor handling of real-time and interrupts, which is critical for packet injection. For serious work, it's recommended to use a Live USB or install on a separate disk partition.
In some cases, updating the Linux kernel can help. New kernel versions contain updated drivers and bug fixes. However, before updating, make sure your specialized drivers are compatible with the new kernel version; otherwise, you may be left without a working adapter.
FAQ: Frequently Asked Questions
Can I use my laptop's built-in Wi-Fi for Kali Linux?
In most cases, no. Integrated cards (especially Intel and Broadcom) rarely support monitor mode and injection. Even if monitor mode is enabled, packet injection will likely be unavailable. It's best to use an external USB adapter.
Which adapter is better for a beginner: Alfa or TP-Link?
For beginners, the Alfa Network with an Atheros chip (e.g., AWUS036NHA) is a better choice. It works immediately after connection, without requiring driver installation. TP-Link adapters often require manual configuration and depend on the device revision, which can be challenging for a novice user.
Does the Wi-Fi adapter work for Kali on Windows?
Yes, most adapters work in Windows as regular network cards. However, implementing monitor and injection mode in Windows is extremely difficult or impossible without specialized software. Most work with such adapters is done in Linux.
Do I need an adapter with an external antenna?
The built-in antenna is sufficient for indoor training. However, if you plan to test networks remotely or work in noisy environments, an adapter with an external antenna connector (RP-SMA connector) is a must-have.
Why can't my adapter see 5 GHz networks?
You may be using a single-band adapter (2.4 GHz only), such as one based on the AR9271 chip. For 5 GHz, you need a dual-band adapter, such as one based on the RTL8812AU. Also, check that the 5 GHz band is enabled in your router settings.