sbiconatore

# radiotap+beacon packet template
hex = "\x00\x00\x0e\x00\x0e\x00\x00\x00\x00\x0cq\t\xc0\x00\x80\x00\x00\x00\xff\xff\xff\xff\xff\xff............\x00\x92\x89D!!\x00\x00\x00\x00d\x00\x11\x04\x00\x01x\x01\x08\x82\x84\x8b\x96\x0c\x12\x18$\x03\x01\x01\x05\x04\x01\x02\x00\x002\x040H`l"
beacon = RadioTap(hex)

# read a file with words to use as ESSID
dict = open("/usr/share/dict/italian", "r")
words = dict.read().split("\n")
dict.close()

while True:
    # set a fake but valid mac address
    mac = [ random.randint(0x00, 0xff),
        random.randint(0x00, 0xff),
        random.randint(0x00, 0xff),
        random.randint(0x00, 0xff),
        random.randint(0x00, 0xff),
        random.randint(0x00, 0xff) ]
    mac[0] |= 2
    mac[0] &= 0xfe
    mac = ':'.join(map(lambda x: "%02x" % x, mac))
    beacon.payload.addr2 = mac
    beacon.payload.addr3 = mac

    # select the ESSID to a dictionary word
    word = random.choice(words)
    beacon.payload.payload.payload.info = word
    beacon.payload.payload.payload.len = len(word)
    sendp(beacon, iface="mon0")