diff --git a/setup.sh b/setup.sh
index 68e3802..a0d0c8f 100755
--- a/setup.sh
+++ b/setup.sh
@@ -230,12 +230,12 @@ PACKAGES=(
     libpcap-dev libssl-dev libffi-dev libsqlite3-dev
     tcpdump tshark nmap masscan
     net-tools iproute2 bridge-utils wireless-tools wpasupplicant
-    aircrack-ng macchanger
+    macchanger
     iptables nftables ebtables arptables
     cryptsetup
     zstd
     tmux screen
-    curl wget git jq sqlite3
+    curl wget git jq sqlite3 file
     dnsutils hostapd dnsmasq
     wireguard-tools
     autossh socat stunnel4
@@ -260,6 +260,13 @@ if apt-cache show sshuttle &>/dev/null 2>&1; then
     PACKAGES+=(sshuttle)
 fi
 
+# aircrack-ng not available on all Ubuntu arm64 mirrors — add only if present
+if apt-cache show aircrack-ng &>/dev/null 2>&1; then
+    PACKAGES+=(aircrack-ng)
+else
+    warn "aircrack-ng not available in apt cache -- skipping (install manually if needed)"
+fi
+
 info "Updating package cache..."
 log_cmd apt-get update -qq
 
@@ -613,9 +620,24 @@ if [[ $FLAG_NO_TOOLS -eq 0 ]]; then
         *)      warn "  Ligolo-ng: unsupported arch $ARCH" ;;
     esac
 
-    # Kerbrute
+    # Kerbrute (no arm64 binary — build from source)
     case "$ARCH" in
-        arm64)  download_release_binary "ropnop/kerbrute" "kerbrute" "/usr/local/bin/kerbrute" "linux_arm64" ;;
+        arm64)
+            if command -v go &>/dev/null; then
+                log_cmd go install github.com/ropnop/kerbrute@latest
+                cp "$(go env GOPATH)/bin/kerbrute" /usr/local/bin/kerbrute 2>/dev/null || true
+            else
+                GOTAR=$(mktemp -d)
+                GOVERSION="1.22.3"
+                curl -fsSL "https://go.dev/dl/go${GOVERSION}.linux-arm64.tar.gz" -o "$GOTAR/go.tar.gz"
+                tar -C /usr/local -xzf "$GOTAR/go.tar.gz"
+                export PATH=$PATH:/usr/local/go/bin
+                log_cmd /usr/local/go/bin/go install github.com/ropnop/kerbrute@latest
+                GOPATH=$(/usr/local/go/bin/go env GOPATH)
+                cp "${GOPATH}/bin/kerbrute" /usr/local/bin/kerbrute 2>/dev/null || true
+                rm -rf "$GOTAR"
+            fi
+            ;;
         amd64)  download_release_binary "ropnop/kerbrute" "kerbrute" "/usr/local/bin/kerbrute" "linux_amd64" ;;
         *)      warn "  Kerbrute: unsupported arch $ARCH" ;;
     esac
@@ -772,10 +794,10 @@ VERIFY_FAIL=0
 
 check() {
     if "$@" &>/dev/null 2>&1; then
-        ((VERIFY_PASS++))
+        ((VERIFY_PASS++)) || true
     else
         warn "  FAIL: $*"
-        ((VERIFY_FAIL++))
+        ((VERIFY_FAIL++)) || true
     fi
 }