Wireless/Python

Approaches

There are a couple of different ways to do wireless attacks with Python.

The One Man Band Approach

The first way is sort of painful, or can overload your system: that's finding every wireless network, parsing out clients and access points, listening to, attacking to get, and obtaining handshake packets, managing all of that information for password cracking, and so on and so forth. Lots of moving parts. It's painful but it's complicated and depends highly on your situation, which is why it gives you lots of control over what you're looking at.

But you end up feeling like a one man band.

Scapy Approach: Mellow Out

The second way is to make things a lot easier for yourself, and let the Scapy Python library do all the parsing of information. You run airodump in the background to channel hop, then run Scapy to parse out all the information that's being collected. You still have to scan for targets and determine what attacks to run, but it makes information management a whole lot easier.

Joe Pesci Approach: Besside-ng

The third way is least painful: besside-ng. You use a Tazmanian Devil vacuum cleaner to obtain handshakes. besside-ng is like the Joe Pesci of the wireless attack world. Joe Pesci gets things done. In this case, you give Joe Pesci a MAC number, and just sit back on your fat ass and do a little information management, and some babysitting of password crackers, and Joe Pesci does all the hard work for you.

Components of Wireless Attacks

The other complication is that wireless attacks can take many forms. It might be listening, or it might be active. It might involve acting as an access point, or acting as a client. Each requires different tools and scripts. It's important to have a clear idea about what you want to do before you start scripting.