Scapy
GPL-2.0๐ Network Recon ยท Python
Scapy is a powerful interactive packet manipulation library and tool written in Python. It can forge or decode packets of a wide number of protocols, send them on the wire, capture them, match requests and replies, and much more. Unlike traditional tools that are limited to specific protocols or tasks, Scapy gives you programmatic control over every byte of every packet, making it possible to craft custom protocol implementations, build network scanners, perform protocol fuzzing, and create network testing tools from scratch. Scapy handles all common protocols (Ethernet, IP, TCP, UDP, DNS, HTTP, ARP, ICMP, 802.11, Bluetooth, and hundreds more) and can dissect captured packets into their component layers. Its interactive Python shell makes it equally useful for quick experiments and complex scripted network operations.
Installation
pip
$ pip install scapyapt (Debian/Ubuntu)
$ sudo apt install python3-scapybrew (macOS)
$ brew install scapyUse Cases
- Crafting custom network packets for protocol testing and fuzzing
- Building custom network scanners and reconnaissance tools in Python
- Analyzing packet captures with programmatic dissection and filtering
- Testing firewall rules by crafting packets with specific flags and options
- Implementing custom protocol parsers for proprietary network protocols
- ARP spoofing, DNS spoofing, and other network attack simulations
Tags
Details
- Category
- ๐ Network Recon
- Language
- Python
- Repository
- secdev/scapy
- License
- GPL-2.0
- Platforms
- ๐งlinux๐macos๐ชwindows
Links
Alternatives & Comparisons
More in Network Recon
Nmap
C/C++The gold standard network scanner. Host discovery, port scanning, service/version detection, OS fingerprinting.
Masscan
CInternet-scale port scanner. Transmits 10 million packets per second. Asynchronous, stateless scanning.
RustScan
RustBlazing fast port scanner that pipes into Nmap. Scans all 65k ports in 3 seconds flat.
Shodan CLI
PythonCommand-line interface for Shodan, the search engine for internet-connected devices.
Wireshark
C/C++The world's foremost network protocol analyzer. Deep packet inspection for hundreds of protocols.
Responder
PythonLLMNR/NBT-NS/mDNS poisoner and rogue authentication server. Captures NTLMv1/v2 hashes on the network.