From d0a356158645af4d56c44a0edd8cd047ba76ced6 Mon Sep 17 00:00:00 2001
From: Yaro Kasear <git@kasear.net>
Date: Fri, 2 May 2025 11:25:12 -0500
Subject: [PATCH] MAC Vendor Resolution (with local cache)

---
 .gitignore  |  3 ++-
 listener.py | 27 +++++++++++++++++++++++++++
 2 files changed, 29 insertions(+), 1 deletion(-)

diff --git a/.gitignore b/.gitignore
index e039ba9..5e22279 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
 settings.env
-__pycache__/
\ No newline at end of file
+__pycache__/
+oui.txt
\ No newline at end of file
diff --git a/listener.py b/listener.py
index d5f8a30..4d45b1a 100755
--- a/listener.py
+++ b/listener.py
@@ -29,6 +29,7 @@ include_probes = False
 # deadpoint_candidates = set()
 unlinked_candidates = set()
 bssid_channels = {}
+vendor_cache = {}
 
 CHANNEL_LIST = [1, 6, 11, 36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140, 149, 153, 157, 161, 165]  # Channels to hop
 CHANNEL_HOP_INTERVAL = 5   # Seconds per channel
@@ -312,7 +313,33 @@ def main():
     print(f"[+] Total APsOnChannel: {len(aps)}")
     print_suspect_aps()
 
+    print("\n[+] Vendor Summary (known APs):")
+    for bssid in sorted(aps):
+        vendor = get_mac_vendor(bssid)
+        print(f"    {bssid} → {vendor}")
+
     reset_interface(args.monitor_iface)
 
+def get_mac_vendor(mac):
+    prefix = mac.upper()[0:8].replace(":", "-")
+    if prefix in vendor_cache:
+        return vendor_cache[prefix]
+    try:
+        if not os.path.exists("oui.txt"):
+            print("[~] Downloading IEEE OUI list...")
+            import urllib.request
+            url = "http://standards-oui.ieee.org/oui/oui.txt"
+            urllib.request.urlretrieve(url, "oui.txt")
+        with open("oui.txt", "r", encoding="utf-8", errors="ignore") as f:
+            for line in f:
+                if prefix in line:
+                    vendor = line.strip().split("\t")[-1]
+                    vendor_cache[prefix] = vendor
+                    return vendor
+    except Exception as e:
+        pass
+    vendor_cache[prefix] = "Unknown"
+    return "Unknown"
+
 if __name__ == "__main__":
     main()