As network forensic investigators, sometimes we encounter rogue devices in a building or on a floor. It is important to find these devices, as they may contain vital information about the attacker and the attack itself. Wi-Fi is no exception. Say that we have a rogue access point running in the network. As forensic investigators, let's try to find the location of the device. We will make use of some scripts to accomplish this. Remember the PWR field in the airodump-ng tool? We need to develop something like that to poll the networks continuously. For this purpose, let's write the following Python 2.7 script:
#!/usr/bin/env python # Author: Nipun Jaswalfrom prettytable import PrettyTableimport operatorimport subprocess ...
