---

Phantom

Overview

Phantom is an ARP Scanner mostly designed to detect directly connected IoT devices. The tool provides details like IP addresses, MAC addresses, hostnames, and the manufacturers of the devices based on their MAC addresses. The tool features a graphical user interface (GUI) built with PySide6 (Qt framework) and utilizes scapy for ARP scanning.

---

Features

• Network Scanning: Identifies devices on the network via ARP requests.
• Device Details: Displays IP address, MAC address, hostname, and vendor information.
• Real-time Sniffing: Captures and lists ARP packets in real-time.
• Graphical User Interface: Easy-to-use UI to display the scanned devices and packet information.
• Multithreading: Ensures non-blocking scans using Python's QThread.

---

Prerequisites

Ensure the following dependencies are installed:

1. Python 3.12 or higher
2. scapy: Used for ARP scanning.
3. PySide6 or PyQt6: For building the GUI.
4. netifaces: To retrieve network interface details.

Requirements

• Python 3.12+
• scapy: For ARP scanning and packet manipulation.
• PySide6: For building the graphical user interface.
• netifaces: To retrieve network interface details.

---

Installation

1. Clone the repository:

   Clone the repository to your local machine:

   git clone https://github.com/CyberRoute/phantom.git
   cd phantom

2. Install the dependencies with Pipenv:

   Install pip if it's not already installed:

   virtualenv env
   source env/bin/activate
   pip install -r requirements.txt

3. Run the application:

   Run the ARP Scanner using the following command. You need to provide the network interface (like eth0, wlan0, or wlp0s20f3) for your system:

   sudo `which python3` main.py --interface <interface>

   Example:

   sudo `which python3` main.py --interface wlp0s20f3

   On Ubuntu in case you run into this error:

   (env) alessandro@alessandro-XPS-9315:~/Development/phantom$ sudo /home/alessandro/Development/phantom/env/bin/python3 main.py --interface wlp0s20f3
   qt.qpa.plugin: From 6.5.0, xcb-cursor0 or libxcb-cursor0 is needed to load the Qt xcb platform plugin.
   qt.qpa.plugin: Could not load the Qt platform plugin "xcb" in "" even though it was found.
   This application failed to start because no Qt platform plugin could be initialized. Reinstalling the application may fix this problem.
   Available platform plugins are: eglfs, minimal, wayland, vkkhrdisplay, offscreen, linuxfb, xcb, wayland-egl, minimalegl, vnc.
   

   Solution:

   sudo apt install libxcb-cursor0
   

Usage Instructions

1. Start the Application:

   After running the application with the correct interface, the GUI will launch.

2. Scanning the Network:

   • Click on the "Scan" button in the UI to initiate a network scan.
   • The tool will display a list of all detected devices in the network, including their IP addresses, MAC addresses, hostnames, and vendors.

3. Device Details:

   • Click on any device in the list to open a detailed window that shows more information about that particular device.

4. Stopping the Scan:

   • Press the "Quit" button to stop the ARP scan and close the application.

Contribute

Fork the repo and send PRs if you like :)