Hacking_and_Penetration_Testing_with_Low_Power_Devices

Penetration testing with a single remote drone
145
There is a simple and elegant way to determine if the mon0 interface is available
in Python, but it requires the Python netifaces module to be installed. If you want to
add this check to your scripts, first, install this module by running sudo apt-get
install python-netifaces. Then, add the following to the beginning of your wireless
sniffing script (or any script using mon0 for that matter) in order to check that
mon0 is available and create it if it is not:
import netifaces, os
interface_list ¼ netifaces.interfaces()
if ’mon0’ not in interface_list:
wifi_list ¼ filter(lambda x: ’wlan’ in x, interface_list)
if len(wifi_list) > 0:
# The following will fail if you need a password for sudo
# or you are not running script as root
os.system(“sudo airmon-ng start wifi_list[0]”)
else:
print “Could not find any wireless interfaces!”
exit(0)
Now that the target network has been identified, Scapy can be used for some further
analysis. Another simple script can be used to monitor traffic for a short while
and detect any attached clients. The monitor interface should be set to remain on the
appropriate channel so that no packets are dropped unnecessarily. In order to ensure
this is the case, execute the following two commands before running this script: sudo
iwconfig wlan0 channel and sudo iwconfig mon0 channel
. Note that in some cases, you may have to take an interface down
before changing the channel using sudo ifconfig down and then bring
it back up with sudo ifconfig up after the channel has been changed
with iwconfig. The following script captures for a minute and also prints out attached
clients in case we need to deauthenticate a client or two in order to capture
handshakes:
#!/usr/bin/env python
# simple script to capture wireless packets with scapy
# As presented in the book
# Hacking and Penetration Testing With Low Power Devices
# by Dr. Phil Polstra
from scapy.all import *
import optparse
# create a list to store networks
client_list ¼ []
pkt_list ¼ []
# define a function to be called with each received packet
def packet_handler(pkt) :