How to Reveal Hidden Wi‑Fi Networks Using Python and Scapy

1. Introduction

Previously we published a Python tutorial for detecting hidden pinhole cameras in hotels. This article extends that idea to discover hidden Wi‑Fi networks using signal analysis.

2. Background

As wireless security awareness grows, many assume that hiding a Wi‑Fi SSID makes it safe. In reality, routers continuously broadcast packets containing MAC address, channel, and other metadata. Even when the SSID is hidden, these packets reveal the network, especially when a client connects.

3. Environment Setup

Required tools: Ubuntu operating system, Python 3.6, PyCharm IDE, and an external wireless network adapter capable of monitor mode.

4. Principle Overview

Routers emit beacon frames that include SSID, MAC address, and other fields. When the SSID is hidden, the ESSID field appears as <length:0>. However, once a device connects, the router includes the SSID in subsequent packets, allowing us to capture it.

5. Implementation

5.1 Monitor nearby wireless signals

Enable monitor mode on the wireless adapter using airmon-ng, then scan with airodump-ng to list nearby networks.

Running these steps first is essential; otherwise the Python script cannot receive wireless packets.

5.2 Capture packets with Python Scapy

Use Scapy to open the monitor‑mode interface (e.g., iface) and call p.show() to display captured packets.

By filtering packets for the MAC address of the hidden network, the script can print the SSID once a client connects, revealing the hidden Wi‑Fi name.

6. Conclusion

This guide demonstrates how a router’s continuous signal emission can be leveraged, together with Ubuntu, Python 3.6, PyCharm, and an external wireless adapter, to detect hidden Wi‑Fi networks. The full code is available on GitHub; reply with “隐藏wifi” to receive the repository link.