first commit

Sniffing_Spoofing/Labsetup/volumes/sniff_and_spoof.py

@@ -0,0 +1,22 @@
+#!/usr/bin/env python3
+from scapy.all import *
+
+def spoof_reply(pkt):
+    # Only respond to ICMP Echo Requests
+    if ICMP in pkt and pkt[ICMP].type == 8:
+        print(f"Intercepted ICMP Echo Request from {pkt[IP].src} to {pkt[IP].dst}")
+        
+        # Build spoofed ICMP Echo Reply
+        ip = IP(src=pkt[IP].dst, dst=pkt[IP].src)
+        icmp = ICMP(type=0, id=pkt[ICMP].id, seq=pkt[ICMP].seq)
+        
+        # Add payload if present
+        payload = pkt[Raw].load if Raw in pkt else b""
+        
+        new_pkt = ip/icmp/payload
+        print(f"Sending spoofed reply from {pkt[IP].dst} to {pkt[IP].src}...")
+        send(new_pkt, verbose=0)
+
+print("Sniff-and-Spoof active on br-c031fbf1a197...")
+# Filter: icmp echo-request
+sniff(iface='br-c031fbf1a197', filter='icmp and icmp[icmptype]=8', prn=spoof_reply)