Welcome to another video of our wi fi pantsing series today we are going to write our first wireless
tool to scan for wireless access points using Skype.
In this script, the first line is to import all functions from Skype.
The second is the variable of the interface we are using.
Then inside our function from from Skype all we're looking for a class or a layer, the DOT 11 F.C.,
as in some other like with other people, it can be only DOT 11 without the fax.
And once it's found, if we find this layer, we check of the frame has a type of zero and subtype of
it, which you probably know by now.
It's a beacon frame, right?
If it's a bigger frame, then we print address number two.
Which is the address of the transmitter or the access point and the SS Edek name, which is in the form
the variable that we pass through to the function, that info.
We also need to check of this Mac address is in our list or not here.
So I don't keep printing the same access point over and over.
We are only interested in new access points that we scanned the last line in the bottom, this one,
we start the sniffer mode of Skype with two arguments, the interface we want to listen on and the function
to run this one.
You're probably wondering now what is EFM dot 11 t colon three dot info.
Right.
Let's actually see that in detail.
First, let's stop and Skype will ensure this thing, the DOT 11 t is the channel number, but how did
we get the channel number?
Right now, let's look.
Let's look inside the dot, 11 year old Ellers DOT 11 DLT.
We have three fields I'd lin and info.
The one we are interested in is the I.D. and info.
If we look in Wireshark, which was just one second, let's open it.
We will notice that the channel is in the deep set.
Let's look forward to channel.
This one adds parameter.
OK, so we are looking for I.D. equal, the asset part, and the info will be our channel, the channel
that we want.
OK, let's capture some frames and see that ourselves.
Let's configure our interface and how many frames we want to sniff.
Raimes, we want to start, is gone, let's say seven frames, OK, now with some frames, we got seven
friends here in the other because it's not DCP or ICMP or anything.
Let's see if we have any got any LTE in them or frames of summary.
OK, let's look.
Seems like we don't have any data living here.
OK, let's capture more, let's say 15.
OK, we have some that 11 ality here, right?
That's good.
So the first frame, it has a bunch of dot 11 Alti here.
OK, that's good.
Let's open frame number zero.
Up frames, not frame.
Now let's look for the asset field, where is it?
It should be next to the DOT 11 Alti, so we're looking for DOT 11 realty, followed by the asset.
OK, I found it here, Dr. T, the idea is this said the length is one and four.
Here is the challenge number.
A challenge number is one, right?
This is how we got our channel number.
That's why we in our Python code, it has the colon three, because one, two, three.
This is the third one.
Right.
OK, let's go back now and run our script.
Good, we're getting some as a side by side and channels here, right?
That was easy.
That's it.
Next time, we'll see how this is done in raw soccer.
So we're not going to use scaping.
That was just for this video.
We have reached the end of this lesson.
Thank you.
And see you in the next one.