Advanced Wi-Fi Analysis with Python

Essential Python Libraries for Wi-Fi Analysis

• Scapy: Powerful packet manipulation library
• Subprocess: Execute system commands from Python
• os: Interface with the operating system
• PyWiFi: Wi-Fi interface for Python
• Netaddr: Network address manipulation
• Matplotlib: Data visualization for network analysis

Advanced Wi-Fi Analysis and Security Testing

1. Monitoring Wi-Fi Signal Strength

This script continuously monitors the signal strength of connected Wi-Fi networks:

import time
import subprocess

def monitor_signal():
    while True:
        result = subprocess.run(['nmcli', '-t', '-f', 'active,ssid,signal', 'dev', 'wifi'], capture_output=True, text=True)
        for line in result.stdout.strip().split('\n'):
            if line.startswith('yes:'):
                _, ssid, signal = line.split(':')
                print(f"Network: {ssid}, Signal Strength: {signal}%")
        time.sleep(5)

monitor_signal()

2. Detecting Rogue Access Points

This script detects unauthorized Wi-Fi access points broadcasting with the same SSID as your network:

import subprocess

def detect_rogue_aps(authorized_ssid):
    result = subprocess.run(['nmcli', '-t', '-f', 'ssid,signal,bssid', 'dev', 'wifi'], capture_output=True, text=True)
    networks = result.stdout.strip().split('\n')
    detected_aps = []
    for network in networks:
        ssid, signal, bssid = network.split(':')
        if ssid == authorized_ssid:
            detected_aps.append((ssid, signal, bssid))
    
    if len(detected_aps) > 1:
        print(f"Warning: Multiple APs detected with SSID '{authorized_ssid}':")
        for ap in detected_aps:
            print(f"SSID: {ap[0]}, Signal: {ap[1]}, BSSID: {ap[2]}")
    elif len(detected_aps) == 1:
        print(f"Authorized AP detected: SSID: {detected_aps[0][0]}, Signal: {detected_aps[0][1]}, BSSID: {detected_aps[0][2]}")
    else:
        print(f"No APs detected with SSID '{authorized_ssid}'")

detect_rogue_aps("Your_Network_SSID")

3. Packet Sniffing with Scapy

This script uses Scapy to capture and analyze Wi-Fi packets:

from scapy.all import *

def packet_handler(packet):
    if packet.haslayer(Dot11):
        if packet.type == 0 and packet.subtype == 8:
            print(f"Detected Beacon frame from AP: {packet.addr2} ({packet.info.decode()})")
        elif packet.type == 0 and packet.subtype == 4:
            print(f"Detected Probe request from: {packet.addr2}")

# Note: This requires root privileges and a wireless interface in monitor mode
sniff(iface="wlan0mon", prn=packet_handler, store=0)