Quick Tutorial - Scapy for Packet Manipulation

Scapy is a python-based packet manipulation program used to sniff, send, and tamper network packets. This program is helpful in creating other tools for scanning, fingerprinting, packet manipulation, sniffing, etc. Scapy has the capability of replacing most of the tools that include hping, 85% of Nmap, arpspoof, arp-sk, arping, tcpdump, tshark, p0f, etc.

Download

Scapy is preinstalled on Kali Linux operating system. Although, you can download the program by visiting the below link:

Link: https://scapy.net/download/

Usage

(1) Create a packet

You can easily create packets by using Ether()

p = Ether()

(2) Display fields of the packet

p.show()

(3) Display raw bits of the packet

You can view raw bits by using hexdump

hexdump(p)

(4) Display content values of packet

You can view the content values of packets by using the ls function.

ls(p)

(5) View the packet in Wireshark

You can display the packet in the Wireshark tool

wireshark(p)

Conclusion

Scapy tool is a simple but effective tool for packet manipulation. This blog covers the basic introduction to Scapy showing some examples of the creation of packets.