#!/usr/bin/python from scapy.all import * import os,sys,random def main(): data = "GET / HTTP/1.1\r\nHost: www.malforge.com\r\n\r\n" client_ip = "192.168.0.89" client_port = 5012 server_ip = "72.167.232.144" server_port = 80 packets = fake_handshake(client_ip, client_port, server_ip, server_port) client_get = Ether()/IP(src=client_ip, dst=server_ip)/TCP(flags="PA", sport=client_port, dport=server_port, seq=packets[-2].seq+1, ack=packets[-1].seq)/data packets.append(client_get) wrpcap("fake.pcap",packets) def fake_handshake(client_ip, client_port, server_ip, server_port): server_isn = random.randint(1024, 65535) client_isn = random.randint(1024, 65535) client_syn = Ether()/IP(src=client_ip, dst=server_ip)/TCP(flags="S", sport=client_port, dport=server_port, seq=client_isn) server_syn = Ether()/IP(src=server_ip, dst=client_ip)/TCP(flags="S", sport=server_port, dport=client_port, seq=server_isn) client_synack = Ether()/IP(src=client_ip, dst=server_ip)/TCP(flags="SA", sport=client_port, dport=server_port, seq=client_isn, ack=server_syn.seq+1) server_ack = Ether()/IP(src=server_ip, dst=client_ip)/TCP(flags="A", sport=server_port, dport=client_port, seq=server_syn.seq+1, ack=client_synack.seq+1) fakeHandshake = [client_syn, server_syn, client_synack, server_ack] return fakeHandshake if __name__ == "__main__": main()