This script allows you to sniff the Wi-Fi probe requests passing near your wireless interface.
Probe requests are sent by a station to elicit information about access points, in particular to determine if an access point is present or not in the nearby environment. Some devices (mostly smartphones and tablets) use these requests to determine if one of the networks they have previously been connected to is in range, leaking personal information.
Further details are discussed in this paper.
Dependencies
This software requires Python 3 and the following dependencies:
Also, tcpdump has to be installed and in the PATH.
Installation
pip3 install --upgrade sniff-probe-req
How to
First of all, you need to enable the monitor mode of your wireless interface.
Then:
usage: sniff-probe-req [-h] [--debug] [-e ESSID [ESSID ...]]
[--exclude EXCLUDE [EXCLUDE ...]] -i INTERFACE
[--ignore-case] [-o OUTPUT] [-r REGEX]
[-s STATION [STATION ...]]
Wi-Fi Probe Requests Sniffer
optional arguments:
-h, --help show this help message and exit
--debug debug mode
-e ESSID [ESSID ...], --essid ESSID [ESSID ...]
ESSID of the APs to filter (space-separated list)
--exclude EXCLUDE [EXCLUDE ...]
MAC addresses of the stations to exclude (space-
separated list)
-i INTERFACE, --interface INTERFACE
wireless interface to use (must be in monitor mode)
--ignore-case ignore case distinctions in the regex pattern
(default: false)
-o OUTPUT, --output OUTPUT
output file to save the captured data (CSV format)
-r REGEX, --regex REGEX
regex to filter the ESSIDs
-s STATION [STATION ...], --station STATION [STATION ...]
MAC addresses of the stations to filter (space-
separated list)
For example:
sniff-probe-req -i wlan0
License
Metadata
Release files for sniff-probe-req 0.5.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| sniff-probe-req-0.5.1.tar.gz | 5.9 kB | Without provenance | Details for sniff-probe-req-0.5.1.tar.gz |
Release files / sniff-probe-req-0.5.1.tar.gz
| Download URL | sniff-probe-req-0.5.1.tar.gz |
|---|---|
| Size | 5.9 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
86a52ac2bd338f2e63c440dc930ad34860a5ed0dfbe146b29ac07c95e20d7ab0
|
|
BLAKE2b-256 checksum How to use checksums |
05a37dc84c0e50df297231d99358508d6948101ba102375969f9be7fcd3654ff
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
Security for sniff-probe-req 0.5.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.