exporting raw wifi beacon data

rozxter1 commented 1 year ago

Is it possible to export raw, full, unparsed wifi beacon data?

joshschmelzle commented 1 year ago

Yes, but currently into two files via lswifi -export <target bssid>.

Example:

> lswifi -export cc:88:c7:4b:d1:40
2022-11-06 22:05:23,785 [INFO] lswifi.core: found and exporting requested bssid from the scan results of f4:a4:75:ab:de:ed.
raw byte files for cc:88:c7:4b:d1:40 exported to C:\Users\josh\AppData\Local\lswifi\2022-11-06\220523

Which produces two files.

<bssid>.bss - which is the header information
<bssid>.ies - which contain the "fixed parameters" and "tagged parameters" a.k.a Information Elements.

 > ls

    Directory: C:\Users\josh\AppData\Local\lswifi\2022-11-06\220523

Mode                 LastWriteTime         Length Name
----                 -------------         ------ ----
-a----         11/6/2022  10:05 PM            360 cc-88-c7-4b-d1-40.bss
-a----         11/6/2022  10:05 PM            341 cc-88-c7-4b-d1-40.ies

> Format-Hex .\cc-88-c7-4b-d1-40.bss

           Path: C:\Users\josh\AppData\Local\lswifi\2022-11-06\220523\cc-88-c7-4b-d1-40.bss

           00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000   08 00 00 00 46 6F 72 65 73 74 36 47 00 00 00 00  ....Forest6G....
00000010   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000020   00 00 00 00 00 00 00 00 CC 88 C7 4B D1 40 00 00  ........ÌÇKÑ@..
00000030   01 00 00 00 0A 00 00 00 CF FF FF FF 58 00 00 00  ........Ï...X...
00000040   01 00 64 00 00 00 00 00 38 CB C4 76 7C 00 00 00  ..d.....8ËÄv|...
00000050   C9 65 FA C6 55 F2 D8 01 11 15 00 00 D8 60 67 00  ÉeúÆUòØ.....Ø`g.
00000060   09 00 00 00 0C 80 12 00 18 80 24 00 30 80 48 00  ........$.0H.
00000070   60 00 6C 00 7B 80 00 00 00 00 00 00 00 00 00 00  `.l.{..........
00000080   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000090   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000000A0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000000B0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000000C0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000000D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000000E0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000000F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000100   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000110   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000120   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000130   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000140   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000150   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000160   48 37 00 00 55 01 00 00                          H7..U...

> Format-Hex .\cc-88-c7-4b-d1-40.ies

           Path: C:\Users\josh\AppData\Local\lswifi\2022-11-06\220523\cc-88-c7-4b-d1-40.ies

           00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000   00 08 46 6F 72 65 73 74 36 47 01 08 8C 12 98 24  ..Forest6G...$
00000010   B0 48 60 6C 07 12 55 53 04 C9 83 00 01 3A 00 C9  °H`l..US.É..:.É
00000020   84 00 C9 85 00 C9 86 00 20 01 00 23 02 12 00 32  .É.É. ..#...2
00000030   01 FB 30 1A 01 00 00 0F AC 04 01 00 00 0F AC 04  .û0.....¬.....¬.
00000040   01 00 00 0F AC 08 E8 00 00 00 00 0F AC 06 0B 05  ....¬.è.....¬...
00000050   00 00 01 12 7A 46 05 73 D0 01 00 0D 33 09 83 A1  ....zF.sÐ...3.¡
00000060   A5 A9 AD B1 B5 B9 BD 43 06 00 0C 12 7A 12 7A 7F  ¥©±µ¹½C....z.z
00000070   0B 04 80 48 80 00 00 00 40 00 40 09 6B 09 01 00  ..H...@.@.k...
00000080   00 CC 88 C7 4B D1 40 6C 02 04 00 C3 02 58 0A C3  .ÌÇKÑ@l...Ã.X.Ã
00000090   02 18 00 F4 01 20 FF 03 37 01 01 FF 1D 23 05 01  ...ô. ..7....#..
000000A0   08 1A 40 10 04 60 08 88 1D 41 81 1C 11 08 00 FA  ..@..`..A....ú
000000B0   FF FA FF 79 1C C7 71 1C C7 71 FF 0C 24 F4 3F 02  .ú.y.Çq.Çq..$ô?.
000000C0   0F FC FF A5 02 A7 00 01 FF 0E 26 01 03 A4 FF 27  .ü.¥.§....&..¤.'
000000D0   A4 FF 42 43 FF 62 32 FF FF 03 3B 78 36 DD 07 50  ¤.BC.b2...;x6Ý.P
000000E0   6F 9A 16 01 01 00 DD 18 00 50 F2 02 01 01 81 00  o....Ý..Pò....
000000F0   03 A4 00 00 27 A4 00 00 42 43 5E 00 62 32 2F 00  .¤..'¤..BC^.b2/.
00000100   DD 16 8C FD F0 04 00 00 49 4C 51 03 02 09 72 01  Ý.ýð...ILQ...r.
00000110   CB 17 00 00 04 11 00 00 DD 07 8C FD F0 04 01 01  Ë.......Ý.ýð...
00000120   01 DD 10 00 0B 86 01 03 00 61 70 36 33 35 5F 62  .Ý......ap635_b
00000130   64 31 34 DD 20 00 0B 86 01 08 08 00 00 00 00 00  d14Ý ..........
00000140   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000150   00 00 00 00 00                                   .....

Is this what you're looking for? Or are you looking for something else? Like exporting to pcap?

rozxter1 commented 1 year ago

Thank You, sorry for misunderstanding documentation

joshschmelzle / lswifi

exporting raw wifi beacon data #20