Ghost Walk utilizes advanced packet generation techniques that closely replicates characteristics of real-world wireless network traffic.
High-Density Swarm Simulation
The software manages a dynamic pool of up to 3000 virtual MAC addresses (1000 stateful, 2000 dormant). This massive scale traffic generation creates a high-density, constantly shifting data deluge, making it computationally difficult for monitoring systems to isolate a single real device.
Protocol-Accurate Device Emulation
Virtual devices are assigned distinct Device Generations (e.g., 802.11n/ac/ax). The system ensures all generated packets strictly conform to the exact presence, order, and structure of Wi-Fi Information Elements (IEs) required for that specific protocol standard, making differentiation significantly more difficult.
Simulated Network Interaction
Virtual devices go beyond simple probing. They simulate a complete, stateful lifecycle including sending Authentication and Association Request frames, followed by a burst of simulated Encrypted Data packets. This realism includes generating realistic sequence number gaps to closely mimic authentic traffic flow.
Environmental SSID Replication
The software passively scans for and identifies real, active SSIDs in the local environment. It then uses these real network names in directed probe requests, mimicking modern smartphone behavior of checking for known or recently connected networks, making automated filtering more difficult.
Driven by Open Source.
Ghost Walk is an Open Source project under the MIT License, permitting unrestricted use, modification, and distribution. You may also find an experimental bluetooth version of this application on my Github, but handle with care. I think the functional and legal concerns are a little trickier and I haven't really dug into it yet. As with both products, use at your own risk and understand local regulations.