Forge packets: arp, udp, icmp or custom packets.
packetforge-ng <mode> <options>
packetforge-ng is a tool to create encrypted packets that can subsequently be used for injection. You may create various types of packets such as arp requests, UDP, ICMP and custom packets. The most common use is to create ARP requests for subsequent injection.
To create an encrypted packet, you must have a PRGA (pseudo random genration algorithm) file. This is used to encrypt the packet you create. This is typically obtained from aireplay-ng chopchop or fragmentation attacks.
-H, --help
Shows the help screen.
-p <fctrl>
Set frame control word (hex)
-a <bssid>
Set Access Point MAC addres
-c <dmac>
Set Destination MAC address
-h <smac>
Set Source MAC address
-j
set FromDS bit
-o
clear ToDS bit
-e
disable WEP encryption
-k <ip:[port]>
Set destination IP (and port)
-l <ip:[port]>
Set source IP (and port)
-w <file>
Write packet to this pcap file
-r <file>
Read packet from this pcap file
-y <file>
Read PRGA from this file
-t <ttl>
Set Time To Live in IP-Header
-s <size>
Set size of the generated null packet.
-0, --arp
Forge an ARP packet
-1, --udp
Forge an UDP packet
-2, --icmp
Forge an ICMP packet
-3, --null
Forge a llc null packet
-9, --custom
Build a custom packet, requires -r to read an unencrypted frame out of a pcap file.
packetforge-ng -y test.xor -a 00:09:5b:12:40:cc -h 00:10:2a:cb:30:14 -k 192.168.1.100 -l 192.168.1.1 -w arp-request.cap
This manual page was written by Thomas d'Otreppe. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or any later version published by the Free Software Foundation On Debian systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL.