Let’s start by talking about how deauth works and why it is possible. Most 2.4GHz networks use the WPA2 security protocol with PMF disabled. With PMF disabled, a deauther exploits a vulnerability in the 802.11 protocol.

The Deauthentication Frame exists by default in Wi-Fi. It is used when we want to restart the router or disconnect from it, the protocol uses this frame to terminate the connection securely and cleanly.

Where's the problem starts?

The WPA2 send this frames in clear text, so its easy to anyone read that.

All we need is scan and spoofing the frames.

1. First of wall we scan the networks around of the high boy, with that scan we capture the MAC Address of the router.
   

2. By leveraging a spoofing technique, the attacker crafts a malicious frame. The exploit sets the router's MAC as the source address while targeting either the entire network via broadcast or a specific client MAC. This forces the target(s) to drop the connection immediately

3. The final stage involves flooding the airwaves with these malicious frames, ensuring the target remains disconnected.

Final Result:

So, how do 5GHz networks protect against these attacks?

5GHz networks often require specific configuration patterns to operate, such as 802.11w and WPA3. The primary difference between the standard 802.11 and 802.11w is the introduction of PMF (Protected Management Frames).

How it works:

• Encryption: With PMF enabled, management frames (like deauthentication frames) are encrypted. The keys required to decrypt them are swapped securely during the initial handshake.
• Integrity (MIC): Each packet includes a MIC (Message Integrity Check). This acts as a digital signature for the frame.

If an attacker tries to send a forged deauth frame using your router's MAC address, your computer will immediately notice that the packet is not signed correctly. Since the signature doesn't match, your device will simply ignore the command and stay connected.

Final Answer

Performance on 5GHz depends entirely on the AP configuration. The Highboy is capable of sending deauth frames at 5GHz frequency, but they will only be effective if PMF (Protected Management Frames) is disabled. If PMF is active, the deauth frames will be ignored by the client.