WiFi-Scripts

Some baseline scripts for Wi-Fi Analysis, network mapping, and enrichment.

tshark_baseline.sh:

Executes 12 tshark commands to aid in wireless network mapping, resulting in csv format files for import into Maltego or other network mapping applications.

• Access Point Information
• Associated Clients
• Probe Requests
• DHCP Server
• DHCP Clients
• ARP
• DNS
• HTTP
• Browser
• MDNS
• ICMP
• TCP

twoPlaces.sh:

Takes input from packet captures collected from two separate locations and identifies MAC addresses present at both locations. Resulting output is in bothplaces.txt.

twoPlaces_SSID.sh:

Takes input from packet captures collected from two separate locations and identifies SSIDs that were probe requested for at both locations. Resulting output is in bothplaces_SSID.txt