airserv-ng

airserv-ng [-D] [-p port] [-v] [-h] interface

-D
    Daemonize the server (run in background)

-p port
    TCP port to listen on (default: 8080)

-v
    Increase verbosity level

-h
    Display help summary

airserv-ng is a utility from the Aircrack-ng suite that starts a lightweight TCP server, enabling remote access to a local wireless network interface. It allows wireless auditing tools like airodump-ng, aireplay-ng, and packetforge-ng to control the interface over the network as if they were local.

Primarily used in scenarios without direct wireless hardware access, such as virtual machines, headless servers, or remote monitoring setups. Users connect remotely using URLs like http://server_ip:port/0, where 0 is the interface index served by airserv-ng.

The server binds to a specified port (default 8080) and forwards all wireless operations transparently. The local interface must be placed in monitor mode beforehand using airmon-ng. This tool is invaluable for distributed wireless security testing but requires caution due to unencrypted communication.

Interface must be in monitor mode (use airmon-ng); unencrypted traffic poses security risks; single interface per instance; root privileges required.

airserv-ng -D -p 8080 mon0
Remote client: airodump-ng http://192.168.1.100:8080/0
Starts daemon on port 8080 serving mon0; replace IP with server address.

Tools reference served interfaces as http://<ip>:<port>/<index>; index starts at 0 for single-interface setups.

Developed in the Aircrack-ng suite (forked from Aircrack in 2005); introduced around 2006 for remote wireless testing; actively maintained for Linux wireless auditing.

airodump-ng(1), aireplay-ng(1), airmon-ng(1), aircrack-ng(1)