Working with wireless networks in an information security environment requires flexibility that built-in laptop modules can't always provide. It's often necessary to isolate the host operating system from potentially risky experiments using virtual machines. However, the standard hypervisor configuration VirtualBox By default, it does not provide the guest system with direct access to the physical radio interface, emulating only a virtual network bridge.
For a full-fledged Wi-Fi network security audit, packet interception, and encryption strength testing, Kali Linux must recognize the adapter as a native device. This allows the network card to be put into "native mode." monitoring, which is critical for tools like Aircrack-ng or Kismet to work. Without direct USB forwarding to the virtual environment, all these capabilities remain unavailable, leaving the user with limited NAT or bridging functionality.
In this guide, we'll cover connecting an external USB WiFi adapter to a virtual machine, installing the necessary extensions and drivers. We'll also cover chipset compatibility, access rights settings, and troubleshooting common errors encountered when deploying a lab setup. Proper hardware configuration is the first step to professional wireless network pentesting.
Hardware requirements and chipset compatibility
Before beginning software configuration, you need to ensure that your physical hardware supports the required features. Not every USB WiFi adapter can operate in monitor mode or support packet injection, which is a basic requirement for Kali Linux. Most integrated Intel or Realtek modules in laptops only operate in client mode and are not correctly forwarded to the virtual machine for auditing purposes.
The key factor in choosing a device is the chipset. Adapters based on these chips demonstrate the most stable performance with VirtualBox. Atheros AR9271, Ralink RT3070 And Realtek RTL8812AUThese models have excellent support in the Linux kernel and allow for a full range of security testing tasks. Cheap Chinese-made devices often use stripped-down drivers that may not support the necessary ioctl commands.
It's also important to consider wireless communication standards. For modern auditing, support for the 802.11ac (Wi-Fi 5) or even 802.11ax standard is desirable, although good old 2.4 GHz is often sufficient for basic training. Make sure the adapter has an external antenna connector or a high-quality built-in antenna, as receiver sensitivity is crucial in monitoring mode.
⚠️ Attention: Some modern Wi-Fi 6 adapters require proprietary drivers, which may be unstable in a virtual environment. Before purchasing, check the Kali Linux community forums for any successful experiences using your specific model in VirtualBox.
Below is a table of popular chipsets and their compatibility with pentesting tasks in a virtual environment:
| Chipset | Monitor Mode support | Injection Support | Ranges | Recommendation |
|---|---|---|---|---|
| Atheros AR9271 | Yes (Stable) | Yes | 2.4 GHz | Ideal for beginners |
| Ralink RT3070 | Yes | Yes | 2.4 GHz | Budget option |
| Realtek RTL8812AU | Yes (Requires drivers) | Yes | 2.4/5 GHz | For advanced users |
| Intel Dual Band | Partially/Not in VBox | No | 2.4/5 GHz | Not recommended |
Installing Oracle VM VirtualBox Extension Pack
The basic version of VirtualBox does not support USB 2.0 and USB 3.0 device passthrough, limiting support to a USB 1.1 controller. For proper operation of modern WiFi adapters, which often use high-speed interfaces, it is necessary to install an extension pack. Extension PackWithout this component, the guest OS simply won't see the connected device in the list of devices available for forwarding.
The installation process requires that the versions of the main application and the extension pack match. If you're using VirtualBox version 7.0, the Extension Pack must also be the same major version. You can download the latest version from the developer's official website, where versions for various processor architectures are also available.
After downloading the extension file (usually has the extension .vbox-extpack) you need to run it. The Virtual Machine Manager will automatically recognize the file type and prompt you to install it. You will be asked to enter the system administrator password to confirm the installation of the kernel modules.
VBoxManage extpack install Oracle_VM_VirtualBox_Extension_Pack-7.0.vbox-extpackAfter successful installation, restart the VirtualBox service or completely close and reopen the application. You can verify activation through the menu. File → Settings → Extensions, where the installed plugin should be displayed with an active check mark.
Setting up USB device forwarding in VirtualBox
After installing the extensions, you need to configure a specific virtual machine to work with USB. Go to the settings of your Kali Linux machine and go to USB and make sure the USB controller is enabled. Select the USB 3.0 (xHCI) controller option, as this will ensure the best compatibility and data transfer speed.
Next, you need to add a filter for your adapter. Click the Add Filter button (the green plus sign on the right) and select your device from the list. If the adapter is connected to the host, it will be displayed by manufacturer or model name. Creating a filter ensures that when the virtual machine starts, VirtualBox will automatically "grab" the device from the host OS and pass it to Kali.
It's important to note that once a device is captured, the host system will lose access to it. If you're using a WiFi adapter to access the internet on the host machine, the connection will be lost immediately after the virtual machine starts. This is normal behavior and confirms successful forwarding.
⚠️ Attention: If the adapter doesn't appear in the list of devices, check whether access is blocked by the security rules of your host OS (especially relevant for Windows and macOS with their strict privacy policies).
For Linux host users, it may be necessary to add the user to a group vboxusersThis is done with the command in the host terminal:
sudo usermod -aG vboxusers $USERAfter running the command, you must log out and log back in (or reboot) for the permissions changes to take effect. Without this step, VirtualBox will not have the necessary permissions to manage the USB port.
☑️ Check USB settings
Installing and updating drivers in Kali Linux
Once the adapter is added to the system, it should be detected in Kali Linux. You can check for the device's presence with the command lsusb in the terminal. You should see a line corresponding to your adapter. However, just because a device appears in the USB list doesn't mean it's ready to use—specific drivers often need to be installed.
In modern versions of Kali Linux, many drivers are already built into the kernel, but chipsets like Realtek often require manual module compilation. First, update the repositories and install the necessary kernel headers and build tools:
sudo apt update
sudo apt install -y linux-headers-$(uname -r) build-essential git
For popular Realtek adapters (such as those based on the RTL8812AU), drivers often have to be obtained from GitHub repositories, as they may be missing or outdated from official sources. The installation process typically involves cloning the repository and running the installation script.
After installing the driver, you must reboot the virtual machine or manually reload the kernel module using the command modprobe. Verify that the interface has appeared in the system by running the command ip link or iwconfigThe new interface is usually given a name like wlan0 or wlx....
What to do if the driver does not compile?
If you encounter compilation errors, check your kernel version. Driver developers often fail to update their code for new kernels. Try finding a fork of the repository that supports your kernel version or temporarily use an older LTS kernel.
Activating the monitoring and diagnostics mode
The main goal of this entire configuration is to be able to switch the interface to monitoring mode. This is done using standard tools via the utility. airmon-ng, included in the package aircrack-ng. Running the command sudo airmon-ng start wlan0 will create a virtual interface (usually wlan0mon), which will capture all traffic on the air.
However, before running the audit, you need to ensure that interfering processes are stopped. Network managers may be running in the background, attempting to automatically connect to networks, messing up the adapter settings. airmon-ng check kill will help stop such processes.
The operation of the monitoring mode is checked by running airodump-ngIf you see a list of available networks and clients, and the packet counters are increasing, the configuration is correct. Missing data or "command failed" errors indicate driver or access rights issues.
It's worth remembering that monitoring mode only works on one frequency at a time. If your network is running on 5 GHz and the adapter switches to 2.4 GHz, you won't see anything. Use the flaps to specify the channel and band.
Solving typical problems and errors
During the setup process, users often encounter a situation where the device is detected in lsusb, but it doesn't appear as a network interface. This is a classic sign of a missing driver. In the kernel logs (dmesg | tail) you may see messages about an unsuccessful attempt to load the module or the absence of microcode.
Another common issue is the device shutting down after a few minutes of use. This may be due to USB power-saving settings in VirtualBox or the Linux kernel itself. Disabling automatic shutdown of USB ports in the host and guest OS power settings often resolves the issue.
If the adapter is unstable, try changing the USB controller settings in the virtual machine properties from 3.0 to 2.0. Some older but reliable adapters perform better in USB 2.0 emulation mode, avoiding xHCI driver conflicts.
⚠️ Attention: Virtual machine interfaces and driver settings may change with software updates. Always consult the official VirtualBox documentation and driver repositories if standard methods stop working.
It's also worth considering that some antivirus and firewall software on the host machine may block packet injection, even if the driver is installed correctly. Temporarily disabling protection or adding exceptions for VirtualBox processes can help diagnose problems.
Why can't VirtualBox detect my USB WiFi adapter?
Most often, the problem stems from the missing Extension Pack or the incorrectly selected USB controller (requiring 2.0/3.0, but using 1.1). Also, check that the adapter isn't being used by another application on the host.
Is it possible to use a laptop's built-in WiFi for Kali in VirtualBox?
In most cases, no. Internal cards are connected via the PCIe bus, not USB, and VirtualBox can't directly route PCIe devices without complex PCI Passthrough, which requires support at the BIOS and host levels.
Which adapter is best to get started?
Adapters based on the Atheros AR9271 chip are ideal for getting started. They're inexpensive, have excellent Linux support out of the box, and work reliably in virtual environments, allowing you to focus on learning the tools rather than struggling with drivers.