# WarBerryPi
[](https://www.blackhat.com/us-16/arsenal.html)
[](https://www.python.org/)
[](https://twitter.com/sec_groundzero)
The **WarBerry** was built with one goal in mind; to be used in red teaming engagement where we want to obtain as much information
as possible in a short period of time with being as stealth as possible.
Just find a network port and plug it in. The scripts have been designed in a way that the approach is targeted to avoid noise
in the network that could lead to detection and to be as efficient as possible.
The WarBerry script is a collection of scanning tools put together to provide that functionality.
####Disclaimer
This tool is only for academic purposes and testing under controlled environments. Do not use without obtaining proper authorization
from the network owner of the network under testing.
The author bears no responsibility for any misuse of the tool.
####Usage
To get a list of all options and switches use:
```python warberry.py -h```
```
Options:
--version show program's version number and exit
-h, --help show this help message and exit
-a ATTACKTYPE, --attack=ATTACKTYPE Attack Mode. Default: --attack
-p PACKETS, --packets=PACKETS Number of Network Packets to capture
-I IFACE, --interface=IFACE Network Interface to use. Default: eth0
-N NAME, --name=NAME Hostname to use. Default: Auto
-i INTENSITY, --intensity=INTENSITY Port scan intensity. Default: T4
-Q, --quick Scan using threats. Deafult: Off
-P, --poison Turn Poisoning on/off. Default: On
-H, --hostname Do not Change WarBerry hostname Default: Off
-e, --enumeration Disable Enumeration mode. Default: Off
-M, --malicious Enable Malicious only mode. Default: Off
-B, --bluetooth Enable Bluetooth scanning. Default: Off
-r, --recon Enable Recon only mode. Default: Off
-W, --wifi Enable WiFi scanning. Default: Off
-S, --sniffer Enable Sniffer only mode. Default: Off
-C, --clear Clear previous output folders in ../Results
-m, --man Print WarBerry man pages
example usage: sudo python warberry.py -a -T Attack all TCP Ports
sudo python warberry.py --attack --toptcp Scan only the top tcp ports
sudo python warberry.py -r Use only the recon modules
sudo python warberry.py -H -I wlan0 Use the wlan0 interface and dont change hostname
sudo python warberry.py -I eth0 -i -T3 Use the eth0 interface and T3 scanning intensity
sudo python warberry.py -I eth0 -N HackerPC Use the eth0 interface and change hostname to HackerPC
```
More usage examples can be found at the '**[Examples](https://github.com/secgroundzero/warberry/wiki/examples)**' wiki page.
### Installation
Detailed installation steps can be found at the '**[Installation](https://github.com/secgroundzero/warberry/wiki/installation)**' wiki page.
### Reporting
Download the /WarBerry/RESULTS folder into the REPORTING/RESULTS folder and open reporting.html.
Apache is needed for the reporting tool to work. In Windows download XAMMP and install Apache.
### Important
The tool in case of MAC address filtering enumerates by default the subnets specified under ***/home/pi/WarBerry/warberry/discover***.
This is done for the tool to run quicker.
If you want to enumerate more subnets either add the subnets in that file or change line 154 in rest_bypass.py so that it does not
read from the file.
### Running Status
If you are connecting through SSH you can check the status of the attacks by checking the results_status file under Results. The file gets
updated after each phase is completed.