Create Packets from Scratch with Scapy [Tutorial]

How to Create Fake Packets Using a Packet Manipulation Tool
Full Tutorial: bit.ly/Scapy
Subscribe to Null Byte: goo.gl/J6wEnH
Kody's Twitter: / kodykinzie
Being able to infiltrate communications between devices is extremely valuable to a hacker. On this episode of Cyber Weapons Lab, we'll show you how to create and manipulate packets with a Python tool called Scapy.
This is just a quick example of how a hacker could use Scapy to craft packets that allow them to stay under the radar even when they're doing things on a network that they're connected to. Because Scapy allows us to build packets from scratch, it means we can get as creative as we want. If we want to kick someone off the network while not being so obvious it was us, we can simply create fake packets that say that the router is the one kicking them off. We can also run a network scan by simply pretending to be the router sending out ARP requests getting everybody to reply and just sitting back and listening for those replies with Wireshark. It's really easy to use Scapy for a variety of different creative things, and the more you learn about TCP/IP, the more useful it will be for your hacking endeavors.
Follow Null Byte on:
Twitter: / nullbytewht
Flipboard: flip.it/3.Gf_0
Weekly newsletter: eepurl.com/dE3Ovb

[@mohamadhammoud]

This guy legit never blinks

[@younesmohssen8158]

I just rewatched the video and HOLY FUCK!

[@Fox420]

that's it, ive been trying to work out why this dude looks creepy as fuck for a while now but couldnt put my finger on it, yeah, no blinking :D

[@appleswagonbrotherealone5903]

If he blinks he will get hacked

[@mauliksarvaiya8039]

Look at 1:20 - 1:25! He did!

[@hadichakroun2579]

Kol 5ara

[@amirmostaghimi7943]

Awesome videos. the libraries you are introducing are awesome. Please keep going with them. So, we can use them in an advanced level.

[@nikolanojic6861]

This was such a great tutorial i can't even describe how good it was 👏

[@incomingairsupport3259]

I like your videos, short sweet and to the point. Maybe this is overkill but using macchanger and the mac spoofing ability provided in scapy doubles the protection. Keep producing great videos.

[@alexxxcanz]

More video on scapy please! And congratulations for your videos, well done!

[@nizaranyonemos6697]

Thank you for the effort you are doing

[@kAh00t]

I'm very much at the beginning of my pen testing career, and your videos have been exactly what I need, concise, informative, interesting :) I also built a Rasp PI pen testing tool off the back of your videos!
Is there a way to send a packet over wifi pretending to be a router when you are not part of that network?
ty :) Keep up the good work

[@pa32779]

Yes there is, here is Scapy's documentation for BlueTooth and for WiFi is similar: scapy.readthedocs.io/en/latest/layers/bluetooth.html

[@mangalisomdingi9733]

I don't think people understand just how creative you can get with this. 😈😈
Nice video!
😊👍

[@css2165]

my guy is so advanced he finds flooding a router with broken packets is funny

[@DULLYK]

Absolute quality as usual

[@moha_linus]

i love this maybe I go and take a CCNA course

[@sepehrghasemy1267]

i recommend pass the CCNA with pdf's and then exam . pdf's and books are really helpfull and more understandale

[@George-pv1lq]

Destination MAC is: b8:a1:75:d5:1e:03 and Source MAC is: 30:52:cb:6b:76:5f, after that the 0x0800 just means the Ethertype is IPv4

[@oscarsalgado189]

with the SEND command as you show on the wireshark its only the sync, what if we need the same thing but with the full 3 way handshake???

[@TOn-fx2gr]

Can we use scapy to send wps pin to the router and how

[@randabdulaziz6968]

the quality of the voice is impressive

[@hackmasterHQ]

Was just wondering why you didn't use tcpdump instead of wireshark.

[@jrpasinski]

Are the Steps different if the packet is being sent to a public IP eg WAN address?

[@SheshadriMadhu]

Thanks this was very useful.

[@lapping78]

I love Null Byte

[@seriousass]

Thank you guys 4 this amaizing tutirials. Love them and you so much, but I have 2 requests.
1: Please make your font in terminal bigger, cause sometimes I (think, not only I) watch your videos on a smartfone and it's too hard to make out, what's written there.
2:Please make a tutorial, where you describe how to work with a LAN network, where all hosts are isolated from each other. (wifi for example, where nmap can't find any hosts except router). What can we do with it, which attacks we can perform and what info we can gather in such network.
Anyway, thanks a lot. Good luck!

[@dukewilson1970]

You are awesome!@Null Byte

[@utkarshkathuria2931]

is there any way I can create Facebook or youtube packets and send them on the network?

[@megaxenu753]

is there some way to catch the packets that get returned?

[@TON-vz3pe]

I wish I had a brother like you

[@pierce9019]

What os are you using? Linix mac?

[@hellopropop]

This man is so hardworking :D.
Where do you learn all this from?

[@numberiforgot]

I'll point out that Wire shark does actually show you the device name of the computer you sent the packet with on scapy.

[@ohmatokito8327]

IP spooing doesn't work on remote server. But it worked my local network. Why?

[@kekkettoful]

Can i create also a adv_packet for Bluetooth?

[@ManeshThankappan]

How can I filter malformed packets using scapy

[@KarimLahlou]

Awesome video, keep up.

[@choutba1725]

another awesome video keep going bro

[@medjemps2331]

7:42 The way he said "but it's not normal" is really creepy

[@thefrey9588]

it really is lmfao

[@shashwatgarg6989]

Hello Mr Robot
Btw, legit thanks man. you really help

[@JtrainMedia]

"send operation not permitted"

[@xugestory]

I would like to know how can this be used in real life ??? Ddos? send payload?

[@no1_knows589]

I love that bird shirt

[@marcinziajkowski3870]

What abou reading packets from certain port and certain IP address ? For example my game is sending packets to another PC on port 55670. I want read that as Man in the middle.

[@NullByteWHT]

Use Wireshark

[@marcinziajkowski3870]

@@NullByteWHT Can wire shark send that packets as string to functions?

[@lapping78]

Thanks Buddy

[@sudosumaster]

permissionError how can i fix this?

[@nikhat6884]

SRC= source IP
DST= destination IP

[@thabetboubaker2729]

nice . good job

[@SA601154]

This can be used as a good communication tool.

[@judedavis92]

Yay now I can have good social skills

[@hermanbrits611]

Use the routers Mac.

[@bulmavegeta23]

thanks!!!

[@SuperChelseaSW6]

What is the countermeasure of this attack?

[@Tracksafe]

Super Frank stateful packet inspection

[@balajithirugnanasambandam170]

hey, can someone help me solve this problem? I'm trying to create a custom layer in scapy and receive its packets, but I can't seem to figure out how to parse those packets in a separate terminal. I read the scapy docs about binding layers but it's kind of confusing. plz help lol
stackoverflow.com/questions/60429262/scapy-how-do-i-sniff-custom-layer-packets

[@xhellxhellbrohu2199]

no

[@alexunixaxwell3952]

Intro song name please?

[@novianindy887]

can it be used for ddos?
how?
just set the count for 1 million packets?

[@novianindy887]

please anyone

[@kalyanirajalingham1286]

Hey genius! How about showing us how to bind a payload to it

[@murdatainment]

Good question

[@haribolanil]

Fabulous !!!

[@hamahawlery7194]

It means that we can DDOS attack in a cafe or we can share Botnet ha
You are great man thanks professor 😍

[@user-be1hi5jb7v]

that was great ❤

[@danepane527]

As always awesome content!! Good deal!

[@JackMason21]

Rewatch the intro but look at his left hand....

[@brandontodd8890]

He has poop on his finger

[@harrydamour7564]

My friends 😬🙋‍♂️

[@theprotector6099]

👮👻

[@harrydamour7564]

@@theprotector6099 😯🤫

[@rwy-ug6pl]

HYDRA HYDRA HYDRA

[@omega_172]

How could one DoS or deauthorize someone

[@circuitmasters5258]

About time brother waiting on this one...python happy *_-)

[@user-rl1yl2ee8z]

Great tutorial, but please, BLINK ! )

[@lapping78]

Lol this is insane, and I love it.

[@aliceyang3374]

Am I the only one that thinks his eyes are kinda creepy?

[@vadimkiselev6951]

Guten Morgen

[@ramzi-sah]

blink

[@NeelNarayan]

Null Byte Army.. Triggered by Python script. -Autogenerated

[@saeedmahmoodi7211]

LOVE U BRO

[@Davi-wv8mi]

old sniffer... i need for snifer https

[@serkratos1216]

But what is skippy? 😂

[@MichaelZimmerer]

This should have just been, "here's a link to an article. Goodbye"

[@hritishkumar3871]

...

[@Batgame_1]

What harm does this do?

[@Tracksafe]

Batgame gaming! This can be used to perform various types of MIM and DoS attacks.

[@da_cat]

How about you show us some easy ways to check if we are being intercepted/monitored by a spook living next door on rent ?! Router does not show any unknowns connected, but i don't have the will to check it every fucking 10 minutes.

[@Stamerix]

New viddd

[@zawmin470]

Oooo

[@shortschannelgaming4631]

I swear i taught that you will hack in scratch

[@raymondy6302]

Three comment but 2 views?

[@raymondy6302]

Third

[@sophiealtenburg275]

Could you please not stare into the camera all the time without blinking? ^^' And thanks!

[@demonsgd5520]

I'm the 666th viewer

[@tshifhiwa1674]

Blink

[@NullByteWHT]

The Kody isn't programmed to blink.

[@ripmeep]

Ewwwwwwww what is "Scaypee"