Scapy is an incredibly powerful, Python-based interactive network packet manipulation program. It can forge (craft) and sniff (capture) network packets. Unlike rigid, pre-built security tools such as Nmap or Wireshark, Scapy allows penetration testers to manually construct or tear down packets layer-by-layer to test complex protocol rules and firewall behaviors. Core Concepts: Stacking Layers
Scapy maps directly to the OSI model. In Scapy, packets are built by instantiating protocol classes and stacking them together sequentially using the / operator. The data flows from the lower layer (left) to the upper layer (right):
# A simple TCP/IP packet example packet = IP(dst=“192.168.1.1”) / TCP(dport=80) / “GET / HTTP/1.1” Use code with caution. Part 1: Packet Forging (Crafting & Sending) Scapy – Packet Manipulation & Sniffing
Leave a Reply