Prevent wireless interface from enabling at startup

When I'm in public, on a penetration testing assignment, or anywhere I need to maintain tight operational security, I bring my wireless interface up manually.  This allows for any interface configurations before becoming visible, such as changing my MAC address.

On my Kali box, it's a simple configuration in /etc/network/interfaces for my wifi:

 

The allow-hotplug stanza enables the interface when detected.  Simply comment out that line:

#allow-hotplug wlan0

 

When you're ready to enable:

[email protected]:/etc/network# ifup wlan0