Scapy
Tool and Usage
Project details
- License
- GPLv2
- Programming language
- Python
- Author
- Philippe BIONDI
- Latest release
- 2.6.1
- Latest release date
Project health
Why this tool?
Scapy can handle tasks like network scanning, tracerouting, probing, unit tests, attacks or network discovery. Due to its manipulation possibilities, Scapy can send invalid frames. It allows you also to inject custom 802.11 frames, or combine other attacking techniques.
Background information
According to the description of the author, Scapy can replace hping, most of of nmap, arpspoof, arp-sk, arping, tcpdump, tethereal, and p0f.
Usage and audience
Scapy is commonly used for network analysis or security assessment. Target users for this tool are pentesters and security professionals.
Features
- Command line interface
- Has bindings for multiple programming languages
Example usage and output
>>> p = IP(dst="github.com")/ICMP()
>>> r = sr1(p)
Begin emission:
.Finished to send 1 packets.
*
Received 2 packets, got 1 answers, remaining 0 packets
>>> r[IP].src
'192.30.253.113'
Tool review and remarks
The review and analysis of this project resulted in the following remarks for this security tool:
Strengths
- + More than 2000 GitHub stars
- + The source code of this software is available
Weaknesses
- - Many provided pull requests are still open
Installation
Supported operating systems
Scapy is known to work on Linux.
Scapy alternatives
Similar tools to Scapy:
Chiron
Chiron is a security assessment framework for IPv6 testing. It can be used during penetration testing or analysis of network devices. Read how it works in this review.
pysap
Pysap is a Python library to craft SAP network protocol packets. It can be used for analysis and security assessments.
ntopng
ntopng is the successor of the original ntop utility. It shows network usage by capturing traffic and provide insights on the usage.
This tool page was updated at . Found an improvement? Help the community by submitting an update.
Related tool information
Categories
This tool is categorized as a network packet generation tool.