This dataset is no longer available and has a current status of 'Withdrawn'.
Please see the catalog for a listing of currently available datasets.
This is a non-IMPACT record, meaning that access to the data is not controlled by IMPACT. For access, see the directions below.

Disclaimer:
This Resource is offered and provided outside of the IMPACT mediation framework. IMPACT and the IMPACT Coordination Council/Blackfire Technology, Inc. expressly disclaim all conditions, representations and warranties including but not limited to Resource availability, quality, accuracy, non-infringement, and non-interference. All Resource information and access is controlled by entities and under terms that are external to the IMPACT legal framework.

Summary

DS-1206
kamene
External Tool
External Data Source
GitHub
Unknown
Unknown
56 (lowest rank is 56)

Category & Restrictions

Other
network data, packet captures
Unrestricted
true

Description


Network packet and pcap file crafting/sniffing/manipulation/visualization security tool. Originally forked from scapy in 2015 and providing python3 compatibility since then.

Scapy is a Python program that enables the user to send, sniff and dissect and forge network packets. This capability allows construction of tools that can probe, scan or attack networks.

In other words, Scapy is a powerful interactive packet manipulation program. It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, match requests and replies, and much more. Scapy can easily handle most classical tasks like scanning, tracerouting, probing, unit tests, attacks or network discovery. It can replace hping, arpspoof, arp-sk, arping, p0f and even some parts of Nmap, tcpdump, and tshark).



Scapy also performs very well on a lot of other specific tasks that most other tools can t handle, like sending invalid frames, injecting your own 802.11 frames, combining techniques (VLAN hopping+ARP cache poisoning, VOIP decoding on WEP encrypted channel, …), etc.

The idea is simple. Scapy mainly does two things: sending packets and receiving answers. You define a set of packets, it sends them, receives answers, matches requests with answers and returns a list of packet couples (request, answer) and a list of unmatched packets. This has the big advantage over tools like Nmap or hping that an answer is not reduced to (open/closed/filtered), but is the whole packet.

On top of this can be build more high level functions, for example one that does traceroutes and give as a result only the start TTL of the request and the source IP of the answer. One that pings a whole network and gives the list of machines answering. One that does a portscan and returns a LaTeX report.

Additional Details

2.6KB
false
Unknown
kamene, 1206, source, corporation, inferlink, inferlink corporation, external, external data source, scapy, packet, network, manipulation, originally, providing, forked, file, sniffing, compatibility, tool, pcap, crafting, python3, 2015, security, visualization, packets, list, tools, answers, answer, frames, send, forge, arp, requests, request, tasks, sending, nmap, handle, program, returns, hping, decode, couples, latex, level, p0f, injecting, voip, answering, capture, protocols, attacks, simple, wire, match, start, specific, ttl, tracerouting, probe, encrypted, build, machines, advantage, wide, unit, tests, techniques, idea, traceroutes, tcpdump, define, construction, probing, user, portscan, decoding, replies, functions, invalid, 802, receives, other, scanning, scan, classical, matches, reduced, interactive, channel, filtered, easily, pings, hellip, python, arping, cache, sniff, networks, unmatched, hopping, sends, powerful, discovery, dissect, report, closed, performs, tshark, replace, combining, wep, lot, result, receiving, capability, vlan, poisoning, top, attack, sk, enables, arpspoof