Scan all clients that connected to specific WIFI

Question

Running everything on kali.
I found all wifi networks nearby and their BSSIDs. I am using a network card with monitor mode on. Now I want to find all clients that connected to that specific BSSID

Here is how this achieved with airodump-ng

airodump-ng -d "target's BSSID" -c "target's channel number" "wireless adapter monitor mode name"

I want to achieve the same effect using scapy.

Can't find any proper reference to achieve that.

Thanks

This might be relevant: stackoverflow.com/questions/38487752/…. You probably want to disclose your OS. — Ross Jacobs
Using from scapy.layers import dot11, this should be semi-straight-forward. With an interface in monitor mode, you can see the raw 802.11 headers. You'd just need to look at all the frames coming in, filter out the ones with the wrong BSSID/irrelevant content, then look to see what MACs are associated with those frames. — Carcigenicate
When I've needed to see how to manipulate frames/packets, I'll load up a REPL, sniff some of the packets using sniff, do packets[0].show() to some packets to see a breakdown of the fields, and then try to manipulate the packets in the REPL. So far, it's proven to be a good way to figure out how to use scapy to manipulate traffic. — Carcigenicate
I was going to post an answer, but it's too flawed to be worth it. Here's what I was going to post though. — Carcigenicate

Nate Mendes Nate Mendes · Accepted Answer · 2021-03-17T21:18:27

NMap also has a python library that makes scanning much simpler. You can find the documentation here.

For example this is what a ping scan would look like:

 import nmap3 as nm
 nmap = nm.NmapScanTechniques()
 results = nm.nmap_ping_scan()

Scan all clients that connected to specific WIFI

1 Answers