PrincessPi/ASS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added beacon fuzz

Browse Source
This commit is contained in:
Princess Pi
2024-09-24 16:40:03 -06:00
parent 16d380b782
commit 7e2be86a81
6 changed files with 175 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dev/Pi4-ETH/scapy/wifi-beacon-fuzz.py
+79
View File
@@ -0,0 +1,79 @@
from scapy.all import *
import urllib.parse
#from random import randbytes
import random
iface = 'wlan1'
sender = 'ac:cb:12:ad:58:27'
def sendProbe(SSID, repeat=3, interval=0.100):
dot11 = Dot11(type=0, subtype=8, addr1='ff:ff:ff:ff:ff:ff',
addr2=sender, addr3=sender)
beacon = Dot11Beacon()
essid = Dot11Elt(ID='SSID',info=SSID, len=len(SSID))
frame = RadioTap()/dot11/beacon/essid
sendp(frame, iface=iface, inter=interval, count=repeat)
def sendProbeRaw(SSID, repeat=1, interval=0.200, listedLen=255):
dot11 = Dot11(type=0, subtype=8, addr1='ff:ff:ff:ff:ff:ff',
addr2=sender, addr3=sender)
beacon = Dot11Beacon()
essid = Dot11Elt(ID='SSID',info=RawVal(SSID), len=listedLen)
frame = RadioTap()/dot11/beacon/essid
sendp(frame, iface=iface, inter=interval, count=repeat)
def sendRandBytesBeacons(numOfBeacons=200, lenOfSSIDs=20, repeat=3, interval=0.100):
for i in range(numOfBeacons):
SSID = randbytes(lenOfSSIDs)
urlEncoded = urllib.parse.quote(SSID)
print(f"\n{i} of {numOfBeacons}\n\tRepeats: {repeat}\n\tLength: {lenOfSSIDs}\n\tSSID: {urlEncoded}\n")
sendProbe(SSID, repeat, interval)
def sendProbeFuzz(repeat=1, interval=0.150):
randMAC = RandMAC()
randLen = RandNum(0, 255)
randSSIDLen = random.randint(0,255)
randSSIDBytes = random.randbytes(randSSIDLen)
urlEncoded = urllib.parse.quote(randSSIDBytes)
dot11 = Dot11(type=0,
subtype=8,
addr1='ff:ff:ff:ff:ff:ff', # dst set to broadcast
addr2=randMAC, # random source
addr3=randMAC) # random bssid
beacon = Dot11Beacon()
essid = Dot11Elt(ID='SSID',
info=RawVal(randSSIDBytes),
len=RawVal(randLen))
frame = RadioTap()/dot11/beacon/essid
print(f"src={randMAC}, dst=ff:ff:ff:ff:ff:ff, BSSID={randMAC}\n\tSSID Set Length: {randLen}\n\tActual SSID Length: {randSSIDLen}\n\tSSID: {urlEncoded}")
sendp(frame, iface=iface, inter=interval, count=repeat)
def sendFuzzBeacons(numOfBeacons=200,
repeat=1,
interval=0.150):
for i in range(numOfBeacons):
print(f"\n{i} of {numOfBeacons}")
sendProbeFuzz()
def sendRandBytesBeaconsRaw(
numOfBeacons=200,
lenOfSSIDs=256,
listedLen=255,
repeat=1,
interval=0.2):
for i in range(numOfBeacons):
SSID = random.randbytes(lenOfSSIDs)
urlEncoded = urllib.parse.quote(SSID)
print(f"\n{i} of {numOfBeacons}\n\tRepeats: {repeat}\n\tListed Length: {listedLen}\n\tReal Length: {lenOfSSIDs}\n\tInterval: {interval} Seconds\n\tSSID: {urlEncoded}")
sendProbeRaw(SSID, repeat, interval, listedLen)
#sendRandBytesBeaconsRaw(numOfBeacons=100, lenOfSSIDs=1, listedLen=255, repeat=3, interval=0.15)
#sendRandBytesBeacons(100, 20, 5, 0.1)
sendFuzzBeacons()
dev/Pi4-ETH/scapy/wifi-beacon-random-byte.py
+45
View File
@@ -0,0 +1,45 @@
from scapy.all import *
import urllib.parse
from random import randbytes
iface = 'wlan1'
sender = 'ac:cb:12:ad:58:27'
def sendProbe(SSID, repeat=3, interval=0.100):
dot11 = Dot11(type=0, subtype=8, addr1='ff:ff:ff:ff:ff:ff',
addr2=sender, addr3=sender)
beacon = Dot11Beacon()
essid = Dot11Elt(ID='SSID',info=SSID, len=len(SSID))
frame = RadioTap()/dot11/beacon/essid
sendp(frame, iface=iface, inter=interval, count=repeat)
def sendProbeRaw(SSID, repeat=1, interval=0.200, listedLen=255):
dot11 = Dot11(type=0, subtype=8, addr1='ff:ff:ff:ff:ff:ff',
addr2=sender, addr3=sender)
beacon = Dot11Beacon()
essid = Dot11Elt(ID='SSID',info=RawVal(SSID), len=listedLen)
frame = RadioTap()/dot11/beacon/essid
sendp(frame, iface=iface, inter=interval, count=repeat)
def sendRandBytesBeacons(numOfBeacons=200, lenOfSSIDs=20, repeat=3, interval=0.100):
for i in range(numOfBeacons):
SSID = randbytes(lenOfSSIDs)
urlEncoded = urllib.parse.quote(SSID)
print(f"\n{i} of {numOfBeacons}\n\tRepeats: {repeat}\n\tLength: {lenOfSSIDs}\n\tSSID: {urlEncoded}\n")
sendProbe(SSID, repeat, interval)
def sendRandBytesBeaconsRaw(
numOfBeacons=200,
lenOfSSIDs=256,
listedLen=255,
repeat=1,
interval=0.2):
for i in range(numOfBeacons):
SSID = randbytes(lenOfSSIDs)
urlEncoded = urllib.parse.quote(SSID)
print(f"\n{i} of {numOfBeacons}\n\tRepeats: {repeat}\n\tListed Length: {listedLen}\n\tReal Length: {lenOfSSIDs}\n\tInterval: {interval} Seconds\n\tSSID: {urlEncoded}")
sendProbeRaw(SSID, repeat, interval, listedLen)
sendRandBytesBeaconsRaw(numOfBeacons=100, lenOfSSIDs=1, listedLen=255, repeat=3, interval=0.15)
#sendRandBytesBeacons(100, 20, 5, 0.1)
dev/Pi4-ETH/scapy/wifi-beacon-scapy.py
+29
View File
@@ -0,0 +1,29 @@
from scapy.all import *
# https://yasoob.me/2018/09/08/sending-sniffing-wlan-beacon-frames-using-scapy/
iface = 'wlan1'
sender = 'c2:13:37:c2:13:37'
def beacon_raw(SSID, length=255):
dot11 = Dot11(type=0, subtype=8, addr1='ff:ff:ff:ff:ff:ff', addr2=sender, addr3=sender)
beacon = Dot11Beacon()
essid = Dot11Elt(ID='SSID',info=RawVal(SSID), len=length)
frame = RadioTap()/dot11/beacon/essid
sendp(frame, iface=iface, inter=0.250, loop=1)
# sendp(frame, iface=iface, inter=0.100, count=256)
def beacon_normie(SSID):
dot11 = Dot11(type=0, subtype=8, addr1='ff:ff:ff:ff:ff:ff', addr2=sender, addr3=sender)
beacon = Dot11Beacon()
essid = Dot11Elt(ID='SSID',info=SSID, len=len(SSID))
frame = RadioTap()/dot11/beacon/essid
print(SSID)
sendp(frame, iface=iface, inter=0.100, loop=1)
# sendp(frame, iface=iface, inter=0.100, count=256)
#longgg = "\xFF"*800
#longggg = f"\x00{longgg}\x00"
#beacon_raw(longggg)
SSID = b"YOU-SEEM-FUNDAMETALLY-FUN\x0AI-THINK-ID-LIKE-TO-KNOW-YOU\x0AI-FEEL-LIKE-BEING-YOUR-FRIEND\x0AI-AM-YOUR-PONY-WAIFU"
beacon_raw(SSID)
dev/Pi4-ETH/scapy/wifi-beacon-scapy.py.orig.bak
+20
View File
@@ -0,0 +1,20 @@
from __future__ import print_function
from scapy.all import ( Dot11,
Dot11Beacon,
Dot11Elt,
RadioTap,
sendp,
hexdump)
SSID = 'Test SSID'
iface = 'wlan1'
sender = 'ac:cb:12:ad:58:27'
dot11 = Dot11(type=0, subtype=8, addr1='ff:ff:ff:ff:ff:ff',
addr2=sender, addr3=sender)
beacon = Dot11Beacon()
essid = Dot11Elt(ID='SSID',info=SSID, len=len(SSID))
frame = RadioTap()/dot11/beacon/essid
sendp(frame, iface=iface, inter=0.100, loop=1)
dev/Pi5-USB/zero-recreate-sd
+1 -1
View File
@@ -1,7 +1,7 @@
#!/bin/bash
mountpoint=/mnt/MARAUDLABEL/
gb_to_zero=1
full_wipe=True
# full_wipe=True
copy_files=True
echo "WILL WIPE DISK USE WITH CARE"
dev/maraduer-exploit-prose.txt
+1 -1
View File
@@ -356,7 +356,7 @@ ffuf -input-cmd 'dd bs=1 count=1K if=/dev/urandom' -u "http://10.0.0.80/get.php?
sudo mdk4 wlan1 b -a -w tawn -c 1 -s 50
scapy:
SSID = b"Test\x00SSID"
SSID = b"youSeemFundamentallyFun"
iface = 'wlan1'
sender = 'ac:cb:12:ad:58:27'