python ma-in-the-middle scapy and netfilterqueue
I am trying to use scapy to perform man-in-the-middle attack on the LAN spoofing the MAC address of my gateway on one side and my smartphone on the other. This part goes on well. However, I would like to modify packets on the fly as well. Hence I am using iptables and netfilterqueue module of python. After working for a short time, the modify script does not print any packets even if traffic is still getting spoofed :
Here is the iptables rule added for PREROUTING traffic:
iptables -t nat -A PREROUTING -s 192.168.1.10/32 -j NFQUEUE --queue-num 1
Here is the script used to bind on the queue 1 :
#!/usr/bin/env python
from scapy.all import *
from netfilterqueue import NetfilterQueue
def modify(packet):
print(packet.get_payload())
pkt = IP(packet.get_payload())
print('source:'+pkt.src+'destination:'+pkt.dst)
# packet.set_payload(str(pkt))
packet.accept()
if __name__ == '__main__':
try:
nfqueue = NetfilterQueue()
nfqueue.bind(1, modify)
nfqueue.run()
except KeyboardInterrupt:
nfqueue.unbind()
Symptoms : even if man-in-the-middle goes on well, and the nfqueue script prints packet for a short time, nothing seems to go on the netfilter queue after a few seconds and nothing goes printed by the modify script anymore.
If I set the source IP address for the whole subnet instead in the iptables rule, I can get broadcast and multicast packets printed in the script. However, not the traffic from my smartphone.
I know I could use ettercap to perform such task, however I would like to create it myself to make sure I understand thinks clearly (and obviously this is not the case by now).
Many thanks for your help!
python scapy netfilter
asked Nov 23 '18 at 17:57
philippe
7531922
add a comment |
I am trying to use scapy to perform man-in-the-middle attack on the LAN spoofing the MAC address of my gateway on one side and my smartphone on the other. This part goes on well. However, I would like to modify packets on the fly as well. Hence I am using iptables and netfilterqueue module of python. After working for a short time, the modify script does not print any packets even if traffic is still getting spoofed :
Here is the iptables rule added for PREROUTING traffic:
iptables -t nat -A PREROUTING -s 192.168.1.10/32 -j NFQUEUE --queue-num 1
Here is the script used to bind on the queue 1 :
#!/usr/bin/env python
from scapy.all import *
from netfilterqueue import NetfilterQueue
def modify(packet):
print(packet.get_payload())
pkt = IP(packet.get_payload())
print('source:'+pkt.src+'destination:'+pkt.dst)
# packet.set_payload(str(pkt))
packet.accept()
if __name__ == '__main__':
try:
nfqueue = NetfilterQueue()
nfqueue.bind(1, modify)
nfqueue.run()
except KeyboardInterrupt:
nfqueue.unbind()
Symptoms : even if man-in-the-middle goes on well, and the nfqueue script prints packet for a short time, nothing seems to go on the netfilter queue after a few seconds and nothing goes printed by the modify script anymore.
If I set the source IP address for the whole subnet instead in the iptables rule, I can get broadcast and multicast packets printed in the script. However, not the traffic from my smartphone.
I know I could use ettercap to perform such task, however I would like to create it myself to make sure I understand thinks clearly (and obviously this is not the case by now).
Many thanks for your help!
python scapy netfilter
asked Nov 23 '18 at 17:57
philippe
7531922
add a comment |
I am trying to use scapy to perform man-in-the-middle attack on the LAN spoofing the MAC address of my gateway on one side and my smartphone on the other. This part goes on well. However, I would like to modify packets on the fly as well. Hence I am using iptables and netfilterqueue module of python. After working for a short time, the modify script does not print any packets even if traffic is still getting spoofed :
Here is the iptables rule added for PREROUTING traffic:
iptables -t nat -A PREROUTING -s 192.168.1.10/32 -j NFQUEUE --queue-num 1
Here is the script used to bind on the queue 1 :
#!/usr/bin/env python
from scapy.all import *
from netfilterqueue import NetfilterQueue
def modify(packet):
print(packet.get_payload())
pkt = IP(packet.get_payload())
print('source:'+pkt.src+'destination:'+pkt.dst)
# packet.set_payload(str(pkt))
packet.accept()
if __name__ == '__main__':
try:
nfqueue = NetfilterQueue()
nfqueue.bind(1, modify)
nfqueue.run()
except KeyboardInterrupt:
nfqueue.unbind()
Symptoms : even if man-in-the-middle goes on well, and the nfqueue script prints packet for a short time, nothing seems to go on the netfilter queue after a few seconds and nothing goes printed by the modify script anymore.
If I set the source IP address for the whole subnet instead in the iptables rule, I can get broadcast and multicast packets printed in the script. However, not the traffic from my smartphone.
I know I could use ettercap to perform such task, however I would like to create it myself to make sure I understand thinks clearly (and obviously this is not the case by now).
Many thanks for your help!
python scapy netfilter
asked Nov 23 '18 at 17:57
philippe
7531922
I am trying to use scapy to perform man-in-the-middle attack on the LAN spoofing the MAC address of my gateway on one side and my smartphone on the other. This part goes on well. However, I would like to modify packets on the fly as well. Hence I am using iptables and netfilterqueue module of python. After working for a short time, the modify script does not print any packets even if traffic is still getting spoofed :
Here is the iptables rule added for PREROUTING traffic:
iptables -t nat -A PREROUTING -s 192.168.1.10/32 -j NFQUEUE --queue-num 1
Here is the script used to bind on the queue 1 :
#!/usr/bin/env python
from scapy.all import *
from netfilterqueue import NetfilterQueue
def modify(packet):
print(packet.get_payload())
pkt = IP(packet.get_payload())
print('source:'+pkt.src+'destination:'+pkt.dst)
# packet.set_payload(str(pkt))
packet.accept()
if __name__ == '__main__':
try:
nfqueue = NetfilterQueue()
nfqueue.bind(1, modify)
nfqueue.run()
except KeyboardInterrupt:
nfqueue.unbind()
Symptoms : even if man-in-the-middle goes on well, and the nfqueue script prints packet for a short time, nothing seems to go on the netfilter queue after a few seconds and nothing goes printed by the modify script anymore.
If I set the source IP address for the whole subnet instead in the iptables rule, I can get broadcast and multicast packets printed in the script. However, not the traffic from my smartphone.
I know I could use ettercap to perform such task, however I would like to create it myself to make sure I understand thinks clearly (and obviously this is not the case by now).
Many thanks for your help!
python scapy netfilter
python scapy netfilter
asked Nov 23 '18 at 17:57
philippe
7531922
asked Nov 23 '18 at 17:57
philippe
7531922
edited Nov 23 '18 at 19:23
asked Nov 23 '18 at 17:57
philippe
7531922
asked Nov 23 '18 at 17:57
philippe
7531922
asked Nov 23 '18 at 17:57
philippe
7531922
7531922
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53451150%2fpython-ma-in-the-middle-scapy-and-netfilterqueue%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53451150%2fpython-ma-in-the-middle-scapy-and-netfilterqueue%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
