#!/usr/bin/python

#

# wifiexplorer-sensor.py

# This script enables remote scanning in WiFi Explorer Pro.

# Version 2.0

#

# Copyright (c) 2017 Adrian Granados. All rights reserved.

#

# This program is free software: you can redistribute it and/or modify

# it under the terms of the GNU General Public License as published by

# the Free Software Foundation, either version 3 of the License, or

# (at your option) any later version.

#

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

# GNU General Public License for more details.

#

# You should have received a copy of the GNU General Public License

# along with this program. If not, see <http://www.gnu.org/licenses/>.

#

import sys

import signal

import threading

import logging

import fcntl

from libnl.attr import nla_put_u32

from libnl.error import errmsg

from libnl.genl.ctrl import genl_ctrl_resolve

from libnl.genl.genl import genl_connect, genlmsg_put

from libnl.msg import nlmsg_alloc

from libnl.nl import nl_send_auto

from libnl.nl80211 import nl80211

from libnl.socket_ import nl_socket_alloc

logging.getLogger("scapy.runtime").setLevel(logging.ERROR)

from scapy.all import *

port = 26999

interface = '' # e.g. wlan0

channels = [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, \

36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140, 149, 153, 157, 161,

165]

unsupported_channels = set()

mindwelltime = 0.060

maxdwelltime = 0.120

dwelltimes = {} # a map of ch, dwelltime

count = 0 # number of captured packets during dwelltime

networks = {}

sniffing = False # flag to stop sniffer

running = False # flag to stop main loop

lock = threading.Lock()

def error(message):

if message:

print '> (error) {0}'.format(message)

def info(message):

if message:

print '> (info) {0}'.format(message)

def packet_handler(p):

lock.release()

def packet_sniffer():

global sniffing

while sniffing:

sniff(iface=interface, prn=packet_handler, store=0, timeout=3)

def channel_to_frequency(ch):

return (ch + 1000) * 5

def channel_hopper():

return 0

def interface_mode(mode):

return success

def signal_handler(signal, frame):

sniffing = False

running = False

sys.exit(0)

if __name__ == "__main__":

if os.geteuid() != 0:

print "You need to have root privileges to run this script."

sys.exit(-1)

if len(sys.argv) < 2:

print("Usage: wifiexplorer-sensor.py <iface> [port]")

sys.exit(-1)

interface = sys.argv[1]

if len(sys.argv) == 3:

port = int(sys.argv[2])

for ch in channels:

dwelltimes[ch] = maxdwelltime

# Install Ctrl+C signal handler

signal.signal(signal.SIGINT, signal_handler)

# Start server

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)

try:

s.bind(('0.0.0.0', port))

s.listen(10)

running = True

while running:

info("ready")

conn, addr = s.accept()

remote_addr = conn.getpeername()

# Set interface in monitor mode

if interface_mode("Monitor"):

sniffing = True

t = threading.Thread(target=packet_sniffer, args=())

t.daemon = True

t.start()

try:

info("connected to " + remote_addr[0])

while sniffing:

if channel_hopper() == 0:

lock.acquire()

found = networks.copy()

networks.clear()

lock.release()

conn.sendall(struct.pack("!I", len(found.keys())))

for key in found:

conn.sendall(struct.pack("!I", len(found[key])) + str(found[key]))

else:

break

except socket.error:

pass

sniffing = False

t.join()

else:

error("failed to set monitor mode")

conn.close()

info("disconnected from " + remote_addr[0])

# Set interface in managed mode

interface_mode("Managed")

except socket.error as msg:

error("bind failed: " + str(msg[0]) + " (" + msg[1] + ")")

sys.exit(-1)

s.close()