I cannot get packet injection to work on the internal Wi-Fi chipset of my OnePlus 5T (dumpling).
Passive monitor mode works perfectly (I can capture handshakes, run airodump-ng, etc.), but active packet injection completely fails. The list of configurations I have tested and no one worked:
- LineageOS 22 + zero-0.6.4-dumplinger-los-4.4.zip
- LineageOS 21 + older los-4.4 kernel builds
- Paranoid Android Topaz 8 + zero-0.4.1-dumplinger-x-4.4.zip
- Paranoid Android Topaz 8 + s0nh-dumplinger-pa-4.4.302-0.3.2.zip
I made sure to disable Android Wi-Fi, then executed airmon-ng start wlan0
┌──(root㉿kali)-[~]
└─# aireplay-ng -9 -e TP-Link_C8F6 -a 3C:84:6A:FB:C8:F6 wlan0 --ignore-negative-one
10:31:01 Waiting for beacon frame (BSSID: 3C:84:6A:FB:C8:F6) on channel -1
10:31:01 Trying broadcast probe requests...
10:31:03 No Answer...
10:31:03 Found 1 AP
10:31:03 Trying directed probe requests...
10:31:03 3C:84:6A:FB:C8:F6 - channel: 2 - 'TP-Link_C8F6'
10:31:09 0/30: 0%
(I also tried locking the channel using airodump-ng -c 2 wlan0 in a separate terminal to bypass the channel -1 bug, but the injection result remains 0/30: 0% or hangs entirely without TX ACKs).
Could you please clarify if internal Wi-Fi injection was ever fully working on OnePlus 5T, or if the README means injection is only supported via the external USB drivers (RTL8812AU/RTL8187) included in the kernel?
Thank you for your time!
I cannot get packet injection to work on the internal Wi-Fi chipset of my OnePlus 5T (dumpling).
Passive monitor mode works perfectly (I can capture handshakes, run airodump-ng, etc.), but active packet injection completely fails. The list of configurations I have tested and no one worked:
I made sure to disable Android Wi-Fi, then executed airmon-ng start wlan0
┌──(root㉿kali)-[~]
└─# aireplay-ng -9 -e TP-Link_C8F6 -a 3C:84:6A:FB:C8:F6 wlan0 --ignore-negative-one
10:31:01 Waiting for beacon frame (BSSID: 3C:84:6A:FB:C8:F6) on channel -1
10:31:01 Trying broadcast probe requests...
10:31:03 No Answer...
10:31:03 Found 1 AP
10:31:03 Trying directed probe requests...
10:31:03 3C:84:6A:FB:C8:F6 - channel: 2 - 'TP-Link_C8F6'
10:31:09 0/30: 0%
(I also tried locking the channel using airodump-ng -c 2 wlan0 in a separate terminal to bypass the channel -1 bug, but the injection result remains 0/30: 0% or hangs entirely without TX ACKs).
Could you please clarify if internal Wi-Fi injection was ever fully working on OnePlus 5T, or if the README means injection is only supported via the external USB drivers (RTL8812AU/RTL8187) included in the kernel?
Thank you for your time!