需要先将网卡改为嗅探功能

!/usr/bin/python

utf-8

from scapy.all import *

interface = 'wlan0mon'
probeReqs = []

def sniffProbe(p):
if p.haslayer(Dot11ProbeReq):
netName = p.getlayer(Dot11ProbeReq).info
if netName not in probeReqs:
probeReqs.append(netName)
print '[+] Detected New Probe Request: ' + netName

sniff(iface=interface, prn=sniffProbe)

嗅探隐藏网络

def sniffDot11(p):
if p.haslayer(Dot11Beacon):
if p.getlayer(Dot11Beacon).info == '':
addr2 = p.getlayer(Dot11).addr2
if addr2 not in hiddenNets:
print '[-] Detected Hidden SSID: with MAC:' + addr2
hiddenNets.append(addr2)

找出隐藏网络的网络名

!/usr/bin/python

coding=utf-8

import sys
from scapy import *

interface = 'wlan0mon'
hiddenNets = []
unhiddenNets = []

def sniffDot11(p):
if p.haslayer(Dot11ProbeResp):
addr2 = p.getlayer(Dot11).addr2
if (addr2 in hiddenNets) & (addr2 not in unhiddenNets):
netName = p.getlayer(Dot11ProbeResp).info
print '[+] Decloaked Hidden SSID : ' + netName + ' for MAC: ' + addr2
unhiddenNets.append(addr2)

if p.haslayer(Dot11Beacon):
    if p.getlayer(Dot11Beacon).info == '':
        addr2 = p.getlayer(Dot11).addr2
        if addr2 not in hiddenNets:
            print '[-] Detected Hidden SSID: with MAC:' + addr2
            hiddenNets.append(addr2)

sniff(iface=interface, prn=sniffDot11)