Hacking_and_Penetration_Testing_with_Low_Power_Devices

202 CHAPTER 7 Building an army of devices
wireless traffic to and from the development server might also reveal project names
provided any of the developers are connecting wirelessly to the server.
Given the likely proximity of the Dalek to the development server, this drone can
be used for some specialized wireless sniffing. The following script will sniff and capture
only packets to and from a specific IP or MAC address. It could easily be modified
to parse through the packets and notify you if something interesting is detected.
#!/usr/bin/env python
# simple script to capture wireless packets
# bound for or from a specific address with scapy
# As presented in the book
# Hacking and Penetration Testing With Low Power Devices
# by Dr. Phil Polstra
from scapy.all import *
import optparse
# create a pktcap file
pktcap ¼ PcapWriter(’devserver.pcap’, append¼True, sync¼True)
ipaddr ¼ None
macaddr ¼ None
# define a function to be called with each received packet
def packet_handler(pkt) :
if ipaddr !¼ None :
if (pkt.getlayer(IP).dst ¼¼ ipaddr) j\
(pkt.getlayer(IP).src ¼¼ ipaddr):
pktcap.write(pkt)
return
if macaddr !¼ None :
if (pkt.getlayer(Ether).dst ¼¼ macaddr) j\
(pkt.getlayer(Ether).src ¼¼ macaddr):
pktcap.write(pkt)
def main() :
# parse command line options
parser ¼ optparse.OptionParser(’usage %prog -i \
-m ’)
parser.add_option(’-i’, dest¼’ipaddr’, type¼’string’,\
help¼’target IP address’)
parser.add_option(’-m’, dest¼’macaddr’, type¼’string’,\
help¼’target MAC address’)
(options, args) ¼ parser.parse_args()
ipaddr ¼ options.ipaddr
macaddr ¼ options.macaddr