kalanda / esp8266-sniffer

An easy experiment which uses the ESP8266 wifi module to look for near smartphones around you
The Unlicense
605 stars 118 forks source link
esp8266 listen packets probe-requests smartphone wifi-network

ESP8266 WifiSniffer

This is only an easy experiment which uses the ESP8266 wifi module to look for near smartphones around you. You can do this very easily with any computer and some software but this is a good way to learn the possibilities of these tiny ESP8266 modules.

VERY IMPORTANT: This code is only for educational purposes. We don’t want to listen for any private communication and we don't do it. All packets that you can listen with this code are public packets without any encryption or secure layer on it, continuously broadcasted to the air by smartphones. Please, check which country's laws applies to you before use this code.

Introduction

Some time ago I saw this video of Chema Alonso about how insecure are our mobile phones. He explains, among other things, that your phone is constantly searching for all WiFi networks which you already connect in the past (unless you did remove as "saved"), saying to anyone who is listening for those public packets where you have been before, and of course, your unique device MAC address.

Those public packets are named as "probe requests" and are used by smartphones to connect faster to wifi networks than if it waits for the network send a Beacon frame to announce the SSID.

This program just listen for those "probe requests" and prints to serial port the information. For now only shows the RSSI (bigger values are near devices), the MAC address of the device and the SSID (if available) of the wifi network which is looking for. Something like that:

Code

This repository uses Platformio to compile and upload code to ESP8266 but you can also use it with Arduino IDE.

I use one nodeMCU devkit because is a fast and easy way to program the chip because it includes serial to usb converter and breadboard compatibility but there are many flavors available.

Useful links