Python Penetration Testing Essentials - Second Edition

Detecting the deauth attack

In this section, we will discuss how to detect a deauthentication attack. It is like a wireless IDS that detects the deauthentication attack. In this program, we will find which access points get deauth frames and how many. We will use the raw socket here to detect the attack.

Let's discuss the deauth_ids.py program. Make sure the monitor is on; otherwise, the program will give an error:

• Import the essential module and library:

      import socket       import Queue      from threading import Thread      from collections import Counter

•  The queue and counter will be used later:

      q1 = Queue.Queue()      co = Counter()

• The following code creates and binds the raw socket to mon0:

      try: sniff = socket.socket(socket.AF_PACKET, socket.SOCK_RAW, ...