operating system Kali Linux is the de facto standard for information security specialists, penetration testers, and system administrators. Despite the fact that modern graphical shells, such as XFCE or KDEAlthough many software packages provide convenient interfaces for network management, situations often arise where standard applets fail to work or require manual configuration via the command line. This may be due to a lack of proprietary drivers, the specifics of the Wi-Fi adapter being used, or the need to perform a security audit that requires full control over the network interface.
Unlike desktop distributions aimed at end users, Kali was originally created as a tool that prioritizes functionality and configuration flexibility. Therefore, understanding how to manage wireless connections at a low level is a critical skill. In this article, we'll cover the process of connecting to secure and open networks in detail, using both built-in utilities and graphical tools, if available in your installation.
It's worth noting right away that the success of the operation directly depends on the compatibility of your wireless module with the Linux kernel. Many cards built into laptops, especially those Broadcom or Realtek, may require the installation of additional firmware packages. If you're using an external USB adapter, make sure it supports monitor mode and packet injection if you plan to perform penetration testing. However, stable operation in client mode is sufficient for general browsing.
Checking compatibility and installing drivers
The first step before attempting a connection is to identify your wireless device and check the status of the installed drivers. In the Linux world, hardware is often automatically detected by the kernel, but specific chipsets may require closed binary blobs for proper operation. Use the utility lspci for internal cards or lsusb for external modules to find out the exact chipset model.
After obtaining the device ID, you need to ensure that the interface is active. Often, the network card is in the "down" state by default. To bring the interface up and check its visibility in the system, use the command ip link set dev wlan0 up, Where wlan0 — This is the name of your wireless interface, which may differ depending on your system configuration.
- 📡 Use the command
iwconfigto quickly check the status of wireless interfaces and the presence of a signal. - 💾 Install the package
firmware-realtekorfirmware-misc-nonfree, if your card requires proprietary firmware. - 🔍 Check kernel logs via
dmesg | grep firmwareto see driver loading errors during system startup.
It is important to understand that some modern adapters, especially those that support the standard Wi-Fi 6, may not be fully supported in the default stable kernel branch. In such cases, compiling drivers from source code or using DKMS modules may be necessary. If the system doesn't detect the device at all, check the physical connection and radio module lock.
⚠️ Warning: Installing drivers from untrusted sources (PPA, third-party repositories) may result in system instability or kernel version conflicts. Always use official Kali repositories or verified sources from the chipset manufacturer.
Connection via graphical interface (GUI)
For users who prefer visual control or work in an environment GNOME And In KDE, the connection process is as simple as possible, similar to Windows or macOS. In the upper right corner of the screen, there's usually a network applet that displays available access points. When you select the desired network, the system will prompt you for a password and attempt to configure the connection automatically using services. NetworkManager.
If automatic connection does not occur, you may need to manually configure security settings. You can select the encryption type in the connection properties, for example, WPA2-Personal or WPA3, and also specify the IP address management method (DHCP or static). This is especially relevant in corporate networks that require setting up proxy servers or static routes.
In some minimalist Kali builds, the GUI network manager may be missing or disabled to save resources. In this case, you can run the graphical utility. nm-connection-editor, which will allow you to create a new connection profile, enter the SSID and security key in a convenient window, bypassing the need to enter commands in the terminal.
- 🖱️ Right-click on the network icon and select "Edit Connections" to manually configure the settings.
- 🔐 Make sure you select the correct authentication method that matches your access point settings.
- 🔄 If you experience any issues, try deleting the network profile and creating it again to clear any possible configuration errors.
It is worth remembering that graphical interfaces are just a superstructure over system services. If NetworkManager If the connection doesn't work correctly, connecting via the GUI will be impossible, and you'll have to resort to console methods. Furthermore, the GUI may hide important connection error details that are easily visible in logs or using the command line.
⚠️ Warning: Graphical network managers may conflict with security auditing tools such as Aircrack-ngBefore launching scans or attacks, make sure NetworkManager is stopped and not taking control of the interface.
Setting up Wi-Fi via the terminal: wpa_supplicant
The most reliable and versatile way to connect to a wireless network in Linux is to use the utility wpa_supplicantThis daemon is responsible for negotiating connections with access points using the WPA, WPA2, and WPA3 protocols. To get started, you need to create a configuration file that will store network information and a password hash.
To generate a password hash (PSK) without storing it in clear text, a utility is used wpa_passphraseYou pass it the network name (SSID) and password, and it returns a ready-made configuration block. This method is preferable from a security standpoint, as the password itself is not stored explicitly in the configuration file, although the hash also allows access to the network.
wpa_passphrase"MyNetworkSSID""MySecretPassword" >> /etc/wpa_supplicant/wpa_supplicant.confAfter creating or updating the configuration file, you need to start the daemon itself, specifying the interface and path to the settings file. Command wpa_supplicant -i wlan0 -c /etc/wpa_supplicant/wpa_supplicant.conf -D wext initiates the connection process, where the flag -D indicates the driver to use (often wext or nl80211).
- 📝 Create a backup copy of the configuration file before making changes to avoid losing your working settings.
- 🔑 Use the option
-swhen running wpa_passphrase to hide the SSID output in the logs if needed. - 🛠 To debug the process, run wpa_supplicant with the flag
-ddto get a detailed report on each stage of the connection.
Successful completion of the daemon doesn't necessarily mean internet access is available. After associating with an access point, you need to obtain an IP address. This is accomplished using the utility dhcpcd or dhclientWithout this step, you will have a data link layer connection, but no packet routing.
Obtaining an IP address and checking the connection
After wpa_supplicant If you have successfully completed a handshake with the router, your interface is assigned a local address, but to access the global network, you need a gateway and DNS servers. In most home and office networks, these parameters are assigned automatically by the DHCP protocol. To request an address, use the command dhcpcd wlan0 or dhclient wlan0.
If the DHCP server isn't responding, you may need to manually assign a static IP address. This is done using the command ip addr add and installation of a gateway through ip route add default viaStatic configuration is often required in server environments or when a DHCP server is not available in isolated network segments.
Network availability is checked using standard diagnostic tools. The command ping Allows you to check the availability of your gateway and external resources, such as Google's DNS servers (8.8.8.8). If the ping works via IP, but websites don't open in the browser, the problem lies in your DNS settings.
☑️ Checking your network connection
| Team | Purpose | Example of use |
|---|---|---|
ip addr show |
Displaying interface IP addresses | ip addr show wlan0 |
ip route |
Viewing the routing table | ip route show |
cat /etc/resolv.conf |
Checking DNS server settings | cat /etc/resolv.conf |
systemctl status dhcpcd |
Checking the DHCP service status | systemctl status dhcpcd |
Keep in mind that Kali Linux may have firewall rules enabled by default that block incoming or outgoing connections. If all settings are correct but you still can't access your connection, check the status. iptables or ufwTemporarily disabling the firewall will help isolate the problem.
Network interface management and operating modes
Wireless adapters in Linux can operate in various modes, the most basic of which is Managed mode. However, for security professionals, Monitor mode is critical, allowing the capture of all traffic, not just that addressed to a specific card. Switching between modes is accomplished through a utility. iw or airmon-ng.
To switch the interface to monitor mode, you must first stop the interfering processes. Command airmon-ng check kill will automatically terminate services that may block mode changes, such as NetworkManager or wpa_supplicant. After this, you can activate monitor mode with the command airmon-ng start wlan0.
It's important to distinguish between "client mode" and "monitor mode." In the former, you connect to the network as a regular device accessing resources. In the latter, your card becomes a passive listener, which is necessary for security analysis but makes normal internet surfing impossible on this interface.
- 👁️ Monitor mode allows you to see packets from all networks within range, even if you are not connected to them.
- 🛑 To return to normal mode, use the command `airmon-ng stop wlan0mon`.
- ⚙️ Some cards require disabling a kernel module before changing the mode, which can be done via `rmmod`.
Interface state management also includes the ability to change MAC addresses (spoofing), which is often required to bypass address filtering on public networks. This is accomplished using the utility macchanger, which allows you to randomly or manually change the hardware address of a network card.
⚠️ Warning: Changing the MAC address or entering monitor mode may be interpreted by network administrators as an attempt at unauthorized access. Use these tools only on networks you own or have written permission to do so.
Automate connection and save profiles
For those who frequently move between different networks or work with multiple profiles, manually entering commands each time becomes ineffective. Kali Linux can be configured to automatically connect to known networks upon system boot or when a signal appears. This is achieved by properly configuring files in the directory. /etc/network/interfaces or via NetworkManager plugins.
Using wrapper scripts allows you to combine all necessary actions (starting the interface, starting wpa_supplicant, obtaining an IP address) into a single command. This is especially useful when working with external adapters that may require a specific initialization sequence.
An example of a simple script for quick connection
#!/bin/bash\ninterface="wlan0"\nssid="MyHomeNet"\npass="SecretPass"\n\nip link set $interface up\nwpa_passphrase"$ssid""$pass" > /tmp/wpa.conf\nwpa_supplicant -B -i $interface -c /tmp/wpa.conf\ndhclient $interface\necho"Connected!">
Troubleshooting and Common Mistakes
Even if you follow all the instructions, connection issues may still occur. One of the most common causes is an incorrect password or encryption type. If wpa_supplicant If the connection error occurs, check your keyboard layout and password capitalization. Also, make sure the access point isn't using MAC address filtering.
Another common problem is a weak signal or interference on the 2.4 GHz frequency. In dense urban areas, channels can be heavily polluted with noise. Using the utility wavemon or iwlist scanning will help you evaluate the signal strength (RSSI) and select the access point with the best performance.
If the interface is constantly disconnecting or doesn't receive an IP address, try forcing a static address to test. It's also worth checking whether your antivirus or firewall is blocking the connection. In the logs /var/log/syslog often contains detailed information about the reason for the connection break.
In conclusion, Wi-Fi management in Kali Linux provides users with powerful tools for any task, from simple network access to in-depth protocol analysis. Mastering the command line in this context provides a significant advantage in understanding how wireless networks actually work.
Why doesn't Kali Linux see my Wi-Fi adapter?
Most likely, your card is missing kernel drivers or requires proprietary firmware. Check the output of the lsusb or lspci command, find the device ID, and search the repositories for the required package (for example, firmware-realtek). The adapter may also be blocked software-based (rfkill list).
How to connect to a hidden network (Hidden SSID)?
To connect to a network with a hidden SSID, you must manually create the wpa_supplicant configuration file, specifying the network name and adding the line `scan_ssid=1`. Automatic scanning will not reveal such a network unless you explicitly specify its name in the settings.
Is it possible to hack a Wi-Fi password using the terminal in Kali?
Kali Linux includes tools (aircrack-ng, reaver) for testing Wi-Fi security, including brute-force password guessing and WPS attacks. However, using these tools against networks that don't belong to you is illegal and punishable by law.
What to do if dhclient hangs when obtaining IP?
Try stopping the dhclient process and starting it again with the verbose flag (`-v`) for debugging. Also, check if the dhcpcd service is running, or try an alternative DHCP client. Sometimes temporarily disabling the firewall helps.