#scapy

[thesecuritysleuth]

Block party: Jamming wifi networks via software

Welcome back all! this is my first proper tutorial in a while so lets get right into it. 

Recently I have been looking into a lot of Hardware tools. On my searches one of the items that features extremely heavily is wifi jammers. Unfortunately where I live it's illegal to own those kinds of devices on the bright side wifi is quite easy to jam simply having a router on the same channel as another one close by can be enough to jam a wifi network.

In this tutorial we will be doing wifi jamming exclusively via a python script all you need is a machine with python and a few other goodies installed.

Setup

To set everything you need up you will need to use the following commands to setup all the prerequisites (I used a machine built with elementary OS for this tutorial):

$ sudo apt install git $ sudo apt install python-pip $ sudo apt install scapy

Now to clone the Git repo you will need:

git clone https://github.com/DanMcInerney/wifijammer.git

Running the tool

Change into the directory where you have cloned the wifijammer repo

cd wifijammer/

Simply run the command below and the script will quickly do some reconnaissance on all AP's it can detect and then start de-authing them:

$ python wifijammer.py

It's also a good idea to have 2 wifi card installed for this script but its not required.

De-Auth Example:

Viola its that simple to jam wifi networks!

Conclusion

As always I hope you found this tutorial useful. Please let me know if you would like to see more wifi focused tutorials in the near future.

As always thanks for your support! Until next time,

The Security Sleuth

[myon-helloworld]

myon-bioinformatics - Overview

Bioinformatics; Twitter: @ myonbioinformat; myon.bioinformatics+github[@at]gmail.com/ITBusiness; Twitter: @myonitbusiness; myon.itbusiness+g

Here is my GitHub account!🐁

⬇️Considering the following maintainability and readability

・Object-oriented as needed

・Python-like🐍

・specific and not too long Comments

・Support as wide a range of versions as possible

It is Released for beginners that Scapy GUI, pyrhon3-nmap GUI, webp converter GUI, some API templates and so on.

please try and check it!🐲

myon(Pythonの人)🐍 lit.link(リットリンク)

エンジニア(主にPython)、楽曲制作、ブログ書いてます、GitHubとQiitaではPythonメイン、YouTubeではフリー音源の楽曲制作、それらに関するブログ書いてます🐠、SNS、Youtube、ブログ、商品、HPなど、いま見て欲しいリンクを、まとめてシェア

[davidbombal]

DHCP Starvation Attack using Python  and Scapy

YouTube video: https://youtu.be/VW0szfPHeo0

[awesomearound]

Sending & Sniffing WLAN Beacon Frames using Scapy

Hi everyone! Over the summers I did research on Wi-Fi and part of my research involved sending and receiving different kinds of IEEE 802.11 packets. I did most of this stuff using Scapy so I thought why not create a tutorial about it? When I started my research I had to look through multiple online articles/tutorials in order to get started with Scapy. In order to save you time I am going to bring you up-to speed by running you through a short tutorial. Goal: Our end goal is to create two scripts. The first script will send WLAN beacon frames and the second script will intercept those beacon frames. Both of these scripts will be running on two different systems. We want to be able to send beacon frames from one system and intercept them from the second one. For those of you who don’t know what a beacon frame is (Wikipedia): Beacon frame is one of the management frames in IEEE 802.11 based WLANs. It contains all the information about the network. Beacon frames are transmitted periodically, they serve to announce the presence of a wireless LAN and to synchronise the members of the service set. Beacon frames are transmitted by the access point(AP) in an infrastructure basic service set (BSS). In IBSS network beacon generation is distributed among the stations. Sending Beacon frames: from __future__ import print_function from scapy.all Read the full article

[frentmeister]

Scapy unter Python 3.7 einbinden

Wer folgende Fehlermeldung bei der Installation von Scapy (PyPi) unter Python bekommen sollte, dem sei direkt gesagt das eine aktuelle Installation von Scapy direkt über ein Terminal und unter Python 3.7 so nicht möglich ist. C:\Users\Frank>Command ""c:\program files (x86)\python37-32\python.exe" -u -c "import setuptools, tokenize;__file__='C:\\Users\\Frank\\AppData\\Local\\Temp\\pip-install-a7qfqmx_\\scapy\\setup.py';f=getattr(tokenize, 'open', open)(__file__);code=f.read().replace('\r\n', '\n');f.close();exec(compile(code, __file__, 'exec'))" install --record C:\Users\Frank\AppData\Local\Temp\pip-record-89rwlqnn\install-record.txt --single-version-externally-managed --compile" failed with error code 1 in C:\Users\Frank\AppData\Local\Temp\pip-install-a7qfqmx_\scapy\Command ""c:\program files (x86)\python37-32\python.exe" -u -c "import setuptools, tokenize;__file__='C:\\Users\\Frank\\AppData\\Local\\Temp\\pip-install-a7qfqmx_\\scapy\\setup.py';f=getattr(tokenize, 'open', open)(__file__);code=f.read().replace('\r\n', '\n');f.close();exec(compile(code, __file__, 'exec'))" install --record C:\Users\Frank\AppData\Local\Temp\pip-record-89rwlqnn\install-record.txt --single-version-externally-managed --compile" failed with error code 1 in C:\Users\Frank\AppData\Local\Temp\pip-install-a7qfqmx_\scapy\ Man benötigt hier die development version die man hier bekommt: https://github.com/secdev/scapy/archive/master.zip Einfach unzippen in den passenden Python Ordner und dann ausführen mit python setup.py install Read the full article

[frentmeister]

Systemtest mit Scapy: Netzwerkpakete fälschen, Entschlüsseln von Netzwerkpaketen

Für diverse Testtätigkeiten nutzt man auch entsprechende Lösungen, in meinem Fall neben Unittest, auch Systemtest die wie in diesem Beispiel über Python und Scapy aufgebaut sind. Scapy ist ein Manipulationstool für Netzwerke, geschrieben in Python. Es kann Pakete fälschen oder entschlüsseln, man kann damit Auswertungen anfertigen und so von Security bis hin zu Lasttest alles abtesten. Es kann mit einer Reihe anderer Programme kombiniert werden, um Visualisierung einschließlich Wireshark  (( Hier weitere Informationen zu Wireshark )) für das Entschlüsseln von Paketen, GnuPlot  ((Hier weitere Informationen zur GnuPlot integration in Scapy https://scapy.readthedocs.io/en/latest/usage.html?highlight=gnuplot)) für die Bereitstellung von Graphen, Graphviz  ((Hier kann man weitere Informationen zur Nutzung von Scapy und Graphviz https://scapy.readthedocs.io/en/latest/installation.html ))  oder VPython ((Hier findet ihr weitere Informationen zu Scapy und VPython https://scapy.readthedocs.io/en/latest/installation.html))  für die Visualisierung usw. zu ermöglichen.  

Scapy und Wireshark

Wie man mit Scapy und Wireshark TCP Pakete analysiert, wird in diesem Beispiel kurz erklärt. Hier sendet Scapy ein Paket, welches dann in einem weiteren File entsprechend ausgelesen werden kann. send-packet.py from scapy.all import * def main(): """ """ packet = IP(dst="192.168.100.123")/TCP()/"from scapy packet" send(packet) def packet_with_seq_n(): packet = IP(dst="192.168.100.xxx", src="192.168.100.xxx")/TCP(sport=333, dport=222, seq=112344)/"Sequence number 112344" send(packet) # we can use sendp to choose different network interface sendp(packet, iface="en0") # lsc() can see functions descriptions. if __name__ == "__main__": main() packet_with_seq_n() Hier wird ein lesbares Wireshark Paket gebaut: send.py import sys from scapy.all import * from datetime import datetime test_content = """HTTP/1.1 200 OK\r\nDate: Wed, 22 Nov 2017 02:13:40 GMT\r\nServer: Apache/2.2.22 (Ubuntu)\r\nLast-Modified: Tue, 21 Nov 2017 04:35:07 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 177\r\nKeep-Alive: timeout=500, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n

It !!!!!!

This is the default web page for this server.!!!!! The web server software is running but no content has been added, yet. """ + datetime.now().strftime("%m/%y %H:%M:%S") def main(): """""" dst_ip = sys.argv dst_port = int(sys.argv) src_ip = sys.argv src_port = int(sys.argv) seq_n = int(sys.argv) ack_n = int(sys.argv) ip_id = int(sys.argv) ip_flags = int(sys.argv) # build packet ip = IP(src=src_ip, dst=dst_ip, id=ip_id, flags=ip_flags) tcp = ip / TCP(sport=src_port, dport=dst_port, flags='PA', seq=seq_n, ack=ack_n) / test_content tcp.display() print("length of packet {}".format(len(tcp))) send(tcp) if __name__ == '__main__': main() Und hier das Wireshark Paket welches wir gerade geschnürt haben. wireshark-tip.md using filter: ip.dst==192.168.100.123   Netzwerkpakete fälschen mit Scapy Hier in diesem Beispiel ((Beispiel kann hier abgerufen werden https://www.python-forum.de/viewtopic.php?f=3&t=43536)) wird dargestellt wie man Scapy zum fälschen oder verändern von Netzwerkpaketen genutzt werden kann. from scapy.all import * import random wait_for_ack = False new_pkt = None def manip_pkt(pkt): global wait_for_ack global new_pkt try: if(pkt.sport == 4430 and isinstance(pkt.load, (bytes, bytearray))): new_pkt = pkt pkt.show() print("") wait_for_ack = True except: if wait_for_ack and pkt.haslayer(TCP) and pkt.flags == "A" and pkt.sport == 4430: pkt.show() new_len = new_pkt.len - len(new_pkt.load) + 5 new_seq = pkt.seq new_ack = pkt.ack new_id = random.randrange(1000, 65000) new_pkt.load = b"close" new_pkt.len = new_len new_pkt.seq = new_seq new_pkt.ack = new_ack new_pkt.id = new_id del new_pkt.chksum new_pkt.show2(dump=True) sendp(new_pkt) wait_for_ack = False else: pass sniff(iface="en0", prn=manip_pkt, store=0) Und hier die einzelnen Netzwerkpakete. ORIGINAL-PACKET: ###### dst = 40:f0:2f:c7:90:20 src = 00:1f:5b:34:45:3c type = 0x800 ###### version = 4 ihl = 5 tos = 0x0 len = 42 id = 34084 flags = DF frag = 0 ttl = 64 proto = tcp chksum = 0x0 src = 192.168.1.7 dst = 192.168.1.38 \options \ ###### sport = 4430 dport = 49710 seq = 1273911897 ack = 3316338221 dataofs = 5 reserved = 0 flags = PA window = 8192 chksum = 0x839a urgptr = 0 options = ###### load = 'oo' ACK-PACKET: ###### dst = 40:f0:2f:c7:90:20 src = 00:1f:5b:34:45:3c type = 0x800 ###### version = 4 ihl = 5 tos = 0x0 len = 40 id = 53843 flags = DF frag = 0 ttl = 64 proto = tcp chksum = 0x0 src = 192.168.1.7 dst = 192.168.1.38 \options \ ###### sport = 4430 dport = 49710 seq = 1273911899 ack = 3316338314 dataofs = 5 reserved = 0 flags = A window = 8189 chksum = 0x8398 urgptr = 0 options = SPOOFED-PACKET: ###### dst = 40:f0:2f:c7:90:20 src = 00:1f:5b:34:45:3c type = 0x800 ###### version = 4 ihl = 5 tos = 0x0 len = 45 id = 58454 flags = DF frag = 0 ttl = 64 proto = tcp chksum = 0x0 src = 192.168.1.7 dst = 192.168.1.38 \options \ ###### sport = 4430 dport = 49710 seq = 1273911899 ack = 3316338314 dataofs = 5 reserved = 0 flags = PA window = 8192 chksum = 0x466d urgptr = 0 options = ###### load = 'close' Read the full article

[nekopippi]

Scapyで802.11のBeaconを飛ばす

表題の通りです。接続できるわけではありませんが、ヘンテコなSSIDのAPがあるかのように見せかけることもできますね。誰も得しない！

戯れに、「おちんちんびろーんww」というSSIDのbeaconを飛ばしてみる。

以下のように、monitor modeのインターフェースを追加してupしてからしてから、scapyを立ち上げてBeaconのフレームを作って送信する。

# iw phy phy0 interface add mon0 type monitor # ip link set mon0 up # scapy WARNING: No route found for IPv6 destination :: (no default route?). This affects only IPv6 INFO: Please, report issues to https://github.com/phaethon/scapy Python 3.5.3 (default, Sep 14 2017, 22:58:41) Type 'copyright', 'credits' or 'license' for more information IPython 6.2.1 -- An enhanced Interactive Python. Type '?' for help. Welcome to Scapy (3.0.0) using IPython 6.2.1 In [1]: broadcast = "ff:ff:ff:ff:ff:ff" In [2]: fake_ssid = "00:11:22:33:44:55" In [3]: beacon = Dot11(addr1=broadcast, addr2=fake_ssid, addr3=fake_ssid)/Dot11Beacon(cap="ESS", timestamp=1)/Dot11Elt(ID="SSID", info="おちんちんびろーんww".encode("utf-8"))/Dot11E ...: lt(ID="DSset", info=b"\x01")/Dot11Elt(ID="Rates", info=b"\x82\x84\x0b\x16") In [4]: sendp(RadioTap(present=0)/beacon, iface="mon0", loop=1)

iPhoneの設定→Wi-Fiを開くと、この通り、おちんちんびろーんしている。

[tutorialtargetsoftcomputer]

Python Network Programming - Part 3: Scapy & Security Tools ☞ http://deal.thegeeknews.net/p/HkwVUSgZx?utm_source=3 #python