Reaver-WPS v1.4

[chrome307]

Please ensure you have aircrack-ng installed as this will be required ( available on the forum ).

Info:

Reaver implements a brute force attack against Wifi Protected Setup (WPS) registrar PINs in order to recover WPA/WPA2 passphrases, as described in http://sviehb.files.wordpress.com/2011/ ... ck_wps.pdf.

Reaver has been designed to be a robust and practical attack against WPS, and has been tested against a wide variety of access points and WPS implementations.

On average Reaver will recover the target AP's plain text WPA/WPA2 passphrase in 4-10 hours, depending on the AP. In practice, it will generally take half this time to guess the correct WPS pin and recover the passphrase.

Source Code Available:

http://code.google.com/p/reaver-wps/

[chrome307]

Here are the instructions to use the application, also I have attached Aircrack-ng (someone's else's hard work on the forum):

Open up terminal and enter:

iwconfig

You should see your wireless card listed usually 'wlan0'

Put your wireless card into monitor mode:

airmon-ng start wlan0

then to view the networks around you enter:

airodump-ng wlan0

You can stop the display to gather the BSSID number of the router by pressing CTRL+C

Now let's begin to use Reaver in terminal by entering:

reaver -i wlan0 -b BSSID -vv

Remember to replace BSSID with the one you wish to test.

Just wait for Reaver to do it's work ...... be prepared to wait several hours!!

[chrismt]

Thanks Mr for this program.

There is an updated alternative called Bully.

Can you make a pet with the dependencies included?

Thanks

https://github.com/bdpurcell/bully

[nilsonmorales]

Just for the Record
My remaster comes with
feeding bottle aircrack front end
cowpatty 4.6 - WPA-PSK dictionary attack.
WiFite v2 (r85) Automated wireless editor
Aircrack-ng 1.1
Reaver v1.4 WiFi Protected Setup Attack Tool
http://nilsonmorales.blogspot.com/2014/ ... linux.html
Still need some minor fixes the main iso, but works pretty well.
Cheers

[chrismt]

Just for the Record
My remaster comes with
feeding bottle aircrack front end
cowpatty 4.6 - WPA-PSK dictionary attack.
WiFite v2 (r85) Automated wireless editor
Aircrack-ng 1.1
Reaver v1.4 WiFi Protected Setup Attack Tool
http://nilsonmorales.blogspot.com/2014/ ... linux.html
Still need some minor fixes the main iso, but works pretty well.
Cheers

Whoa, thanks Mr.

I just read that there is Reaver 1.5 trunk build.

https://code.google.com/p/reaver-wps-fork/

I have a tough to crack Linksys that gives me wps transaction failed 0x02 message. I tried using different options. My password is 0501234567 but I don't know how to create a dictionary between 0500000001 to 0509999999.

[nilsonmorales]

Here's 1.5
is too big to add as attachment
donwnload from terminal

Code: Select all

wget -c --no-check-certificate https://copy.com/XfBHQdA2UZvM/reaver-1.5.pet

MD5SUM 752b42ab003bd5eb2d355d9e3e83e9f0
https://code.google.com/p/reaver-wps/is ... ail?id=183

[chrismt]

Here's 1.5
is too big to add as attachment
donwnload from terminal

Code: Select all

wget -c --no-check-certificate https://copy.com/XfBHQdA2UZvM/reaver-1.5.pet

MD5SUM 752b42ab003bd5eb2d355d9e3e83e9f0
https://code.google.com/p/reaver-wps/is ... ail?id=183

Thanks a lot.