With hidden SSIDs, we could run a dictionary attack to identify the hidden SSIDs. For that, we will iterate through a list of SSIDs and send a broadcast packet with a particular SSID. If the SSID exists, the access point will respond with a packet. So, we could start the SSID sniffer we created in the previous recipe and wait for the response from the access point while running the brute force attack with the SSIDs.
Dictionary attack on hidden SSIDs
How to do it...
Here are the steps to write a script that can be used to run a dictionary attack on SSIDs:
- As usual, create a new dictionary-attack-ssid.py file and open it in an editor.
- Load all the required modules, and initialize the variables:
from scapy.all import * senderMac...