PACKETFORGE-NG(1)

💖 PACKETFORGE-NG(1) — the packet-forging bestie 💖

okay so bestie, welcome to packetforge-ng, a General Commands Manual page and honestly? it's giving legend behaviour. sit down, grab a strawberry 🍓, we're building packets.

---

✨ NAME ✨

packetforge-ng — forge packets: ARP, UDP, ICMP or custom packets. 💅

---

🌸 SYNOPSIS 🌸

packetforge-ng <mode> <options>

like. that's it. that's the whole vibe. a mode, some options, and you're off. 🦋

---

🎀 DESCRIPTION 🎀

so packetforge-ng is the tool you call when you need to create encrypted packets that you can then use for injection. no cap, that's literally its whole job and it eats every time.

you can make lots of different packet types:

• arp requests 💖
• UDP 🌈
• ICMP ⭐
• custom packets 🧚

but the most common use — the main character move, iykyk — is creating ARP requests for subsequent injection. that's the one everybody's obsessed with.

💀 important lore drop: to create an encrypted packet you MUST have a PRGA (pseudo random generation algorithm) file. that's the thing that encrypts the packet you're building. no PRGA, no packet, periodt.

where do you get a PRGA file tho? bestie, you typically get it from aireplay-ng chopchop or fragmentation attacks. that's the plug. 🫶

---

👑 OPTIONS 👑

here's the full menu, no skips, no summaries, every single one. 💜

• -H, --help — shows the help screen. your lil safety net. 🙈
• -p <fctrl> — set frame control word (hex)
• -a <bssid> — set Access Point MAC address
• -c <dmac> — set Destination MAC address
• -h <smac> — set Source MAC address
• -j — set FromDS bit
• -o — clear ToDS bit
• -e — disable WEP encryption
• -k <ip:[port]> — set destination IP (and port)
• -l <ip:[port]> — set source IP (and port)
• -w <file> — write packet to this pcap file
• -r <file> — read packet from this pcap file
• -y <file> — read PRGA from this file
• -t <ttl> — set Time To Live in IP-Header
• -s <size> — set size of the generated null packet.
• -0, --arp — forge an ARP packet
• -1, --udp — forge an UDP packet
• -2, --icmp — forge an ICMP packet
• -3, --null — forge a llc null packet
• -9, --custom — build a custom packet, requires -r to read an unencrypted frame out of a pcap file. 🫡

---

🔥 EXAMPLE 🔥

here's the moment you've been waiting for, the demo, the slay:

packetforge-ng -y test.xor -a 00:09:5b:12:40:cc -h 00:10:2a:cb:30:14 -k 192.168.1.100 -l 192.168.1.1 -w arp-request.cap

look at that. PRGA from test.xor, AP MAC 00:09:5b:12:40:cc, source MAC 00:10:2a:cb:30:14, dest IP 192.168.1.100, source IP 192.168.1.1, and out pops arp-request.cap. ate. 💅✨

---

🧚 AUTHOR 🧚

this manual page was written by Thomas d'Otreppe. 🫶

permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or any later version published by the Free Software Foundation.

on Debian systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL. 📜

---

💫 SEE ALSO 💫

the whole friend group, the entire squad, the group chat if you will:

• airbase-ng(8)
• aireplay-ng(8)
• airmon-ng(8)
• airodump-ng(8)
• airodump-ng-oui-update(8)
• airserv-ng(8)
• airtun-ng(8)
• besside-ng(8)
• easside-ng(8)
• tkiptun-ng(8)
• wesside-ng(8)
• aircrack-ng(1)
• airdecap-ng(1)
• airdecloak-ng(1)
• airolib-ng(1)
• besside-ng-crawler(1)
• buddy-ng(1)
• ivstools(1)
• kstats(1)
• makeivs-ng(1)
• wpaclean(1)
• airventriloquist(8)

---

and that's the page bestie!! 🌈⭐

this was Version 1.7.0, dated May 2022 — and it's still PACKETFORGE-NG(1) in this house. 💖

bye ily, go forge something iconic. 👑🦋