Function buildEnhancedProbeResponse

src/modules/wifi/karma_attack.cpp:1127–1212

}

size_t buildEnhancedProbeResponse(
    uint8_t *buffer, const String &ssid, const String &targetMAC, uint8_t channel, const RSNInfo &rsn,
    bool isHidden
) {
    uint8_t pos = 0;
    buffer[pos++] = 0x50;
    buffer[pos++] = 0x00;
    buffer[pos++] = 0x00;
    buffer[pos++] = 0x00;
    sscanf(
        targetMAC.c_str(),
        "%hhx:%hhx:%hhx:%hhx:%hhx:%hhx",
        &buffer[pos],
        &buffer[pos + 1],
        &buffer[pos + 2],
        &buffer[pos + 3],
        &buffer[pos + 4],
        &buffer[pos + 5]
    );
    pos += 6;
    memcpy(&buffer[pos], currentBSSID, 6);
    pos += 6;
    memcpy(&buffer[pos], currentBSSID, 6);
    pos += 6;
    buffer[pos++] = 0x00;
    buffer[pos++] = 0x00;
    for (int i = 0; i < 8; i++) buffer[pos++] = 0x00;
    buffer[pos++] = 0x64;
    buffer[pos++] = 0x00;
    if (rsn.akmSuite > 0 || rsn.pairwiseCipher > 0) {
        buffer[pos++] = 0x31;
        buffer[pos++] = 0x04;
    } else {
        buffer[pos++] = 0x21;
        buffer[pos++] = 0x04;
    }
    buffer[pos++] = 0x00;
    buffer[pos++] = isHidden ? 0x00 : (uint8_t)ssid.length();
    if (!isHidden && ssid.length() > 0 && ssid != "*HIDDEN*" && ssid != "*WILDCARD*") {
        memcpy(&buffer[pos], ssid.c_str(), ssid.length());
        pos += ssid.length();
    }
    buffer[pos++] = 0x01;
    buffer[pos++] = sizeof(probe_rates);
    memcpy_P(&buffer[pos], probe_rates, sizeof(probe_rates));
    pos += sizeof(probe_rates);
    buffer[pos++] = 0x03;
    buffer[pos++] = 0x01;
    buffer[pos++] = channel;
    buffer[pos++] = 0x05;
    buffer[pos++] = 0x04;
    buffer[pos++] = 0x00;
    buffer[pos++] = 0x01;
    buffer[pos++] = 0x00;
    buffer[pos++] = 0x00;
    buffer[pos++] = 0x2a;
    buffer[pos++] = 0x01;
    buffer[pos++] = 0x00;