scapy README

The project's README from github.com/secdev/scapy. As one markdown file: README.md.

Scapy   Scapy

Scapy unit tests Codecov Status Codacy Badge PyPI Version License: GPL v2 Join the chat at https://gitter.im/secdev/scapy

Scapy is a powerful Python-based interactive packet manipulation program and library.

It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, store or read them using pcap files, match requests and replies, and much more. It is designed to allow fast packet prototyping by using default values that work.

It can easily handle most classical tasks like scanning, tracerouting, probing, unit tests, attacks or network discovery (it can replace hping, 85% of nmap, arpspoof, arp-sk, arping, tcpdump, wireshark, p0f, etc.). It also performs very well at a lot of other specific tasks that most other tools can't handle, like sending invalid frames, injecting your own 802.11 frames, combining techniques (VLAN hopping+ARP cache poisoning, VoIP decoding on WEP protected channel, ...), etc.

Scapy supports Python 3.7+. It's intended to be cross platform, and runs on many different platforms (Linux, OSX, *BSD, and Windows).

Getting started

Scapy is usable either as a shell or as a library. For further details, please head over to Getting started with Scapy, which is part of the documentation.

Shell demo

Scapy install demo

Scapy can easily be used as an interactive shell to interact with the network. The following example shows how to send an ICMP Echo Request message to github.com, then display the reply source IP address:

sudo ./run_scapy
Welcome to Scapy
>>> p = IP(dst="github.com")/ICMP()
>>> r = sr1(p)
Begin emission:
.Finished to send 1 packets.
*
Received 2 packets, got 1 answers, remaining 0 packets
>>> r[IP].src
'192.30.253.113'

Resources

The documentation contains more advanced use cases, and examples.

Other useful resources:

Installation

Scapy works without any external Python modules on Linux and BSD like operating systems. On Windows, you need to install some mandatory dependencies as described in the documentation.

On most systems, using Scapy is as simple as running the following commands:

git clone https://github.com/secdev/scapy
cd scapy
./run_scapy

To benefit from all Scapy features, such as plotting, you might want to install Python modules, such as matplotlib or cryptography. See the documentation and follow the instructions to install them.

Packaging status

Packaging status

License

Scapy's code, tests and tools are licensed under GPL v2. The documentation (everything unless marked otherwise in doc/, and except the logo) is licensed under CC BY-NC-SA 2.5.

Contributing

Want to contribute? Great! Please take a few minutes to read this!

scapy (secdev/scapy)

Searching Database…

12.6K ·GitHub
这是什么?Scapy 是一个基于 Python 的交互式网络数据包处理程序和库,可以用来构造、解析、发送、捕获和分析网络数据包。
它是命令行交互环境还是 Python 库?两者都是。Scapy 既可以作为交互式命令行运行,用于实时处理网络上的数据包,也可以把同样的代码导入到你自己的 Python 脚本中作为库使用。
我该怎么开始使用?先安装,然后直接启动 Scapy 命令行,或在自己的 Python 脚本中导入 scapy;文档中的“快速入门”页面和“20 分钟了解 Scapy”教程涵盖了基础内容。
要让所有功能正常工作,我还需要安装额外的 Python 包吗?在 Linux 和 BSD 上,核心的数据包构造和嗅探功能无需任何外部模块即可使用;但绘图等可选功能需要额外的库,例如 matplotlib 或 cryptography。
在 Windows 上能开箱即用吗?不能直接用。在 Windows 上,你需要先安装文档中说明的几个必需依赖,Scapy 才能正常工作。
它能在哪些操作系统上运行?Scapy 是跨平台的,可在 Linux、macOS、BSD 和 Windows 上运行,支持 Python 3.7 及以上版本。
Scapy 可以替代哪些现有工具?对于许多经典的网络任务,它可以替代 hping、nmap 的大部分功能、arpspoof、arp-sk、arping、tcpdump、wireshark 和 p0f。
除了基本的嗅探,它还适合哪些任务?它适用于扫描、路由追踪(traceroute)、探测、单元测试、自定义攻击和网络发现,还能完成一些高级操作,例如发送无效帧、注入原始 802.11 帧,或将 VLAN 跳跃与 ARP 缓存投毒结合使用。
在哪里可以找到动手实践的示例来学习它?文档中包含“快速入门”指南、交互式教程“20 分钟了解 Scapy”、一个快速的交互式演示会话,以及专门针对 HTTP/2 和 TLS 的 Notebook 示例。
What are similar projects?sniffnet, brook, masscan, ecapture, thc-hydra, fq, impacket, netshoot
Creator
secdev
Size
85.6 MB
Stars
12.6K
Age
11y
Commits · 90 Days