Inconspicuously Sniff Wi-Fi Data Packets Using an ESP8266 D1 Mini [Tutorial]

แชร์
ฝัง
  • เผยแพร่เมื่อ 31 พ.ค. 2024
  • How to Discreetly Sniff Data Packets with a Cheap Microcontroller
    Full Tutorial: bit.ly/Sniff8266
    Subscribe to Null Byte: goo.gl/J6wEnH
    Kody's Twitter: / kodykinzie
    Monitoring network traffic is an essential skill for a hacker. However the tools used can be a little conspicuous. On this episode of Cyber Weapons Lab, we'll show you how to use an ESP8266 to sniff data packets discreetly. Specifically, we'll be using a D1 Mini with a datalogger shield that has a coin cell battery slot and a port for a microSD card. And to make it all work, we'll be working in the Arduino IDE, and reading the information later in Wireshark.
    Parts you'll want:
    D1 Mini: www.amazon.com/Makerfocus-Nod...
    D1 Mini Datalogger Shield: www.amazon.com/Aideepen-Logge...
    microSD card: www.amazon.com/Micro-SD-Memor...
    Solder: www.amazon.com/s/?tag=whtnb-20
    Soldering iron: www.amazon.com/s/?tag=whtnb-20
    Micro-USB cable: www.amazon.com/AmazonBasics-M...
    microSD card reader: www.amazon.com/s/?tag=whtnb-20
    5 volt power supply (for portability): www.amazon.com/CanaKit-Raspbe...
    CR1220 battery (for RTC): www.amazon.com/Energizer-Lith...
    Follow Null Byte on:
    Twitter: / nullbytewht
    Flipboard: flip.it/3.Gf_0
    Weekly newsletter: eepurl.com/dE3Ovb
  • แนวปฏิบัติและการใช้ชีวิต

ความคิดเห็น • 82

  • @AmirKhan-fc4uz
    @AmirKhan-fc4uz 5 ปีที่แล้ว +7

    “Back when I was at school” he definitely hacked his whole school.

  • @gadby237
    @gadby237 5 ปีที่แล้ว +1

    I'm trying to use my Asus wireless ad dos it matters what chipset the adp has because my kali kand see my adap

  • @j0hn4th4nd03
    @j0hn4th4nd03 5 ปีที่แล้ว

    You are a god amongst men thanks for all the awesome content.

  • @Magicwinguy
    @Magicwinguy 5 ปีที่แล้ว +13

    Reads title... sounds like a spacehuhn project. Watches video yep it is and as always its really cool and I have to order another esp32

    • @DDBAA24
      @DDBAA24 5 ปีที่แล้ว

      Yep , the only thing that is negative about it is that it will only be useful with http traffic as a pcap dev.. PoC but nevertheless still very cool

    • @newold1093
      @newold1093 2 ปีที่แล้ว

      @@DDBAA24 Can i capture handshake file with an esp32

  • @mechabits197
    @mechabits197 5 ปีที่แล้ว

    This seems like a good place for me to start my little idea, i'd like to be able to access the pcap(not that i have figured out how to interpret those) file remotely or have it sent via gsm device, so I can try to pinpoint the devices location. Now i realize this might be a dumb idea and some other way of locating device, but it would be helpful to tie thieves to position with ID's of phones or routers(i think).

  • @lemd49
    @lemd49 5 ปีที่แล้ว

    Another nice episode with a solid structure. Can you point me to your d1 mini driver coverage as I am having real headaches w my d1 on the Mac (no problems w nodemcu however) tks

  • @-jamiestorch-4562
    @-jamiestorch-4562 5 ปีที่แล้ว +1

    Hi can this be used to capture the public ip?without connecting to a the router?

  • @mnageh-bo1mm
    @mnageh-bo1mm 5 ปีที่แล้ว

    I am searching for an esp that can work as a handshaker. .. deauths the clients then capture the handshake from all APs or a selected one. and cheks if it's valid or not .

  • @emaayan
    @emaayan 7 หลายเดือนก่อน

    here are some tips , if you don't care about channel hopping you can turn the esp into an AP and join it (or have esp join an existing ssid) , create a TCPServer and access the capture directly via IP, wireshark supports the use of named pipes which can also be tcp ip's so for example you could do wireshark -i TCP@ with the default port being 19000) and wireshark will connect directly to esp and start streaming packets, no need for clunky python serial script.
    another option would be to try and use esp32 s3 or s2, with the OTG ports turned into etherent using TinyUSB framework, but that's another issue , i didn't try yet .

  • @user-rd4jg9it4y
    @user-rd4jg9it4y 8 หลายเดือนก่อน

    Can the dstike watch be used to prevent these sniffers?

  • @johndoex421
    @johndoex421 5 ปีที่แล้ว +2

    DAMNNN I wanted a video about this for sooo long

  • @TheTubejunky
    @TheTubejunky 5 ปีที่แล้ว +8

    Could you do an episode about Faraday cages and methods to protect your equipment from rogue EMP.
    ✓Thanks for the awesome content!

    • @TheTubejunky
      @TheTubejunky 5 ปีที่แล้ว

      Average protocol for today's 5G is a scruples means for this very topic. @akalittlebirdie

  • @Jon-da-bad
    @Jon-da-bad 5 ปีที่แล้ว

    Good show bro keep it up

  • @lash1co
    @lash1co 3 ปีที่แล้ว

    There is any way to detect devices not connected to any AP?

  • @soubhikbiswas1202
    @soubhikbiswas1202 4 ปีที่แล้ว

    does it captures handshakes?

  • @faisel685
    @faisel685 5 ปีที่แล้ว +8

    I don't understand u do this you concet to the access point or u sniff all the access point around you?
    Thanks

  • @peteroo-hv1cj
    @peteroo-hv1cj ปีที่แล้ว

    pcap.h => File file type not declared error ,

  • @hughhefner4774
    @hughhefner4774 5 ปีที่แล้ว +1

    You should do a review on the tornado tool supplied by ec council

    • @DDBAA24
      @DDBAA24 5 ปีที่แล้ว

      cant find it can you post a link

  • @user-rd4jg9it4y
    @user-rd4jg9it4y 8 หลายเดือนก่อน

    How do you detect these sniffers? If someone has put them in your house or car how do you detect them?

  • @Lup1n_3
    @Lup1n_3 4 ปีที่แล้ว

    I don't understand how it connects to the Wi-Fi network?

  • @vadimkiselev6951
    @vadimkiselev6951 5 ปีที่แล้ว +1

    Thank

  • @harrydamour7564
    @harrydamour7564 5 ปีที่แล้ว +1

    My friend 🙋‍♂️

  • @surplusdriller1
    @surplusdriller1 4 ปีที่แล้ว

    pcap.h missing when compiling

  • @bens4446
    @bens4446 หลายเดือนก่อน

    Line 52 in PCAP.h throws "error: 'File' does not name a type; did you mean 'SdFile'?" EDIT: Replacing "File" with "FsFile" in line 52 seems to fix this, but now I am having baud rate issues (gibberish in the serial monitor).

  • @bappesarker864
    @bappesarker864 5 ปีที่แล้ว

    sir , i installed kali linux on my rasperry pi 3 B+, but few days later when i try to format the sd card it shows write protected and sd card was not formatted. please help me.

    • @DDBAA24
      @DDBAA24 5 ปีที่แล้ว +1

      Are you using a full sized SDcard adapter to flash your microSD cards ?? If you're there is a tiny little switch on the side of the SD to microSD Adapter card. Make sure the switch is in the ' up ' position. If you managed to slide it to the 'down' position it puts write protection on your adapter which would make it impossible to write to any microSD's using that adapter. This has nothing to do with your file system or Linux installation its just a tiny slider switch on the side of the adapter.. Hope this helps

    • @bappesarker864
      @bappesarker864 5 ปีที่แล้ว +1

      @@DDBAA24 thank you for your advised i tried to all possible ways. after all i replace it with life time warrenty :)

    • @DDBAA24
      @DDBAA24 5 ปีที่แล้ว

      @@bappesarker864 Well I am glad to hear you at least sorted your problem out. I wish I could have done more to help out. I never asked you what brand it was, but there are a lot of crappy cards with false specs and all together fake cards, Chinese replicas. When buying things on the internet there is always a chance of having to deal with that. Or it just could have been defective with flash memory its always a gamble. Good luck to you.

    • @bappesarker864
      @bappesarker864 5 ปีที่แล้ว

      @@DDBAA24 Thank you for replies , i have already get a new sd card from previous sd card because it has life time warrenty and the brand is PNY. any thank you again....

  • @belajardanberbagiapapunitu4246
    @belajardanberbagiapapunitu4246 5 ปีที่แล้ว +1

    thanks l like it

  • @mty4821
    @mty4821 5 ปีที่แล้ว +2

    So actually the cool part of this is that I can load the code, then power on the device using a power bank maybe, keeping it hidden in my pocket, right?

  • @punitdarji1871
    @punitdarji1871 5 ปีที่แล้ว

    I am not using SDCard. I want to store pcap files in my hard-disk. What should I do?

    • @DDBAA24
      @DDBAA24 5 ปีที่แล้ว +2

      get a usb to serial cable, the one on the adafruit website has a good chipset. Then you just have to run an application to monitor and or record the traffic and choose to save the capture to your hdd...................... Hope that helps

  • @Lup1n_3
    @Lup1n_3 4 ปีที่แล้ว

    I do not understand how it connects to the wifi network

  •  5 ปีที่แล้ว

    Anybody know a good laptop to run Kali Linux on? Preferably to boot into Kali and not a VM? No specific price range.

    • @mohamedbhasith90
      @mohamedbhasith90 5 ปีที่แล้ว

      Any laptop which has i7 core and 1070 gpu and at least 8gb ram, addon ssd for super speed

    • @gcanary562
      @gcanary562 5 ปีที่แล้ว +1

      @@mohamedbhasith90 ahahaha this is a joke right?

    • @gcanary562
      @gcanary562 5 ปีที่แล้ว

      Try to get a good cpu like any i5 or i7. Running Kali you ain't need any dedicated gpu. So you can go with an integrated one. I recommend you to buy a Lenovo Thinkpad.

    • @mohamedbhasith90
      @mohamedbhasith90 5 ปีที่แล้ว

      @@gcanary562 yup!

    •  5 ปีที่แล้ว

      @@gcanary562 Yeah the Thinkpad came up a few times in my research. I also looked at System76 laptop and also saw that Dells had pretty good Linux support too so I'm looking at the XPS lineup. But it does seem an i5 or i7 is a must.

  • @Lasnikers
    @Lasnikers 5 ปีที่แล้ว +5

    1:28 oh lol I am from Germany

  • @BeeJay91
    @BeeJay91 5 ปีที่แล้ว

    Thank u m8

  • @user-rd4jg9it4y
    @user-rd4jg9it4y 8 หลายเดือนก่อน

    Do these sniffers run on 2.4 or 5 ghz?

    • @droopylikesyourface
      @droopylikesyourface 26 วันที่ผ่านมา

      2.4 , the esp8266 got only the capability to 2.4 as its cheap

  • @sanxingbaby3823
    @sanxingbaby3823 5 ปีที่แล้ว

    I know that this maybe irrelevant, but I think that you may provide a solution. I connected my MacBook to a TL-WDR7300 router using a cable with RJ45 and could get access to the internet. But I don't know the password for the router. Is there any way that I can get the password for wifi network of this router? Thank you!

    • @sanxingbaby3823
      @sanxingbaby3823 5 ปีที่แล้ว

      @xOr Thanks for your reply. The router has no default password, it requires the user to set a password. If I reset the router without knowing the password, I couldn't set the password the same as the old one. Thus, the owner would know. Is there any way to get the WiFi password other than brutal force? Besides, I am connecting the router physically.

    • @DDBAA24
      @DDBAA24 5 ปีที่แล้ว

      You need to do a 30/30/30/ reset and you will be able to set a new password, but this will purge all network and router configurations. Also if your looking to use the router more ore less as a dongle unless its bridged to a wireless network connected to the internet its not going to work. Hold the reset for 30 sec , still holding it in unplug the power waiting another 30 seconds, still never letting go of reset plug the power back in and wait the last 30 seconds and you will be prompted to set a new password. If your looking to use the router as a wireless dongle I would check to see if it is DD-WRT or Openwrt compatible. Then you need to watch a tutorial on setting your router up as a client bridge, on youtube there are many tutorials on how to do that. The regular firmware is not going to allow you to scan and connect to networks like a dongle would. If I totally mis understood what you said then you mean you want to bridge to someones network but you do not know there password, in that event the only solution would be to capture a handshake and decrypt it or ask for the password lol.

  • @yacine661
    @yacine661 5 ปีที่แล้ว +9

    what's gonna be the point from sniffing packets when most web sites use HTTPS ?

    • @ddjazz
      @ddjazz 5 ปีที่แล้ว +2

      Indeed It will only decode 802.11b/g/n HT20 packets supported by the api ,most will be management packets since the sniffing is in promiscuous mode. So most packets will contain meaningless or encrypted stuff. It will also miss a lot of packets if there is a lot of traffic nearby.
      As a pcap sniffer i dont think it is useful at all.
      It would be great as a packet counter , wifi device counter or deauthing packets visualiser .

    • @Matt-ir1ky
      @Matt-ir1ky 5 ปีที่แล้ว +1

      @@ddjazz You gotta be like the Hugh Jackman in Swordfish. He can't explain it he just sees the code.

    • @DDBAA24
      @DDBAA24 5 ปีที่แล้ว

      @@ddjazz A lot of people use this chip as an attendance checker and its even useful in that sense for a diy security system. Or if you want to know who is in and out of your house and you can ID people by their MAC. To be fair on the github spacehuhn does say that this is just a proof of concept that packets could be malformed, his deauth devices on the other hand they're very cool and useful. He does some nice work and has good ideas.

    • @ddjazz
      @ddjazz 5 ปีที่แล้ว

      @@DDBAA24 I didnt say anything about the usefulness of the chip , but about using the esp8266 as a packet capturer.I gave some examples where using the data in management frames can have benefits.

    • @Abdega
      @Abdega 5 ปีที่แล้ว

      It can be useful for observing WiFi traffic that is not https

  • @DDBAA24
    @DDBAA24 5 ปีที่แล้ว +1

    @Null Byte , Check out this shield hackaday.io/project/27566/gallery#28223587c208f896d629f97985cba9a9 , it lets you add 16 additional gpio pins to the d1 mini. Your microSD breakout is eating up all of your pins by adding this shield you can add additional parts like a tiny screen or whatever you want. They're not as powerful as the internal pins and cant do pwm but it will free up internal pins that you can use for that should you choose or need to do so.. Just thought you might appreciate this. Also I saw the megasync tab in your file manager , I would recommend the mega-cmd utility to anyone that uses that service, it gives you a shell into your mega cloud and it runs on Debian 9 . It makes it crazy easy to manage your storage and it comes with several server options for staying connected and file transfers. Even the free version of Mega is just great, there is one that is a little better but it gives you a few months of 100GB and then you have to sign up. If you need to back up a bunch of stuff up to 100GB maybe to move to another machine or whatever try adrive.com . You can ssh,sftp,ftp,rsync, right from the terminal or even setup a webdav. Plus for a free service the transfer speeds aren't too bad, you know how it goes.

  • @sallyshiner4849
    @sallyshiner4849 5 ปีที่แล้ว

    My boyfriend has been surveilling my cell phone for months. He installed an app on my phone and has been monitoring text, calls, emails, social media, ect.. but I have no idea how he got the app on my phone. Do you know how that was done? He doesn't know my passwords and has never had my phone physically...

    • @DaPanda19
      @DaPanda19 3 ปีที่แล้ว

      Kinda glad nobody ever answered this

    • @Geordje
      @Geordje 3 ปีที่แล้ว

      Thats really creepy. I know im a year late but does he still do stuff like that?

    • @alejandrajorge2338
      @alejandrajorge2338 ปีที่แล้ว

      Well, I wish he is your ex-boyfriend now. Reaaally insane to do that.

  • @arminrud7550
    @arminrud7550 3 ปีที่แล้ว

    Unfortunatly it won't compile.

  • @maqsoodali2948
    @maqsoodali2948 5 ปีที่แล้ว

    help bro

  • @maqsoodali2948
    @maqsoodali2948 5 ปีที่แล้ว

    please

  • @void7327
    @void7327 5 ปีที่แล้ว +1

    Yeet 12 mins

  • @Warlock1515
    @Warlock1515 5 ปีที่แล้ว +1

    Do you speak German!?

    • @NullByteWHT
      @NullByteWHT  5 ปีที่แล้ว +2

      ich sprachen kein... no. I just learned to say I speak no german when I lived there.

    • @m4gg197
      @m4gg197 4 ปีที่แล้ว

      Null Byte that’s spelled so funny 😍😂

  • @0dayCTF
    @0dayCTF 5 ปีที่แล้ว

    Great tutorial but honestly it’s virtually useless!

  • @mnageh-bo1mm
    @mnageh-bo1mm 5 ปีที่แล้ว

    You go to school ?

  • @dewaynewhite5318
    @dewaynewhite5318 5 ปีที่แล้ว +1

    Second

  • @void7327
    @void7327 5 ปีที่แล้ว +1

    Forth

  • @DownTownDowns
    @DownTownDowns 5 ปีที่แล้ว +1

    First