IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [wps]

WPS (Wi-Fi Protected Setup) is a protocol that attempts to allow easy establishment of a secure wireless home network.

51 questions
1
vote
1 answer

WPS PIN and key

I was testing how WPS works on my home router and tried to gain access with a tool I found on github called airgeddon. Problem is, I got the PIN down (the PIN I wrote down below is made up, it's actually another one), and I got the key back which is…
leroy_jenkins
  • 11
  • 1
1
vote
1 answer

How do we know the AuthKey in Pixie Dust attack?

I've been reading about the Pixie Dust attack from various sources, that provide a low-level explanation of how it works. In the values E-Hash1 = HMAC(AuthKey, E-S1 || PSK1 || PKE || PKR) and E-Hash2 = HMAC(AuthKey, E-S2 || PSK2 || PKE || PKR) PKE…
Giannis Pappas
  • 33
  • 5
1
vote
1 answer

Success rate of pixie dust attack

Recently I read about the pixie dust attack in which a WPS PIN is decoded with time stamp and other resources within a fraction of a second. The only drawback is that it only works on WPS-enabled routers. What is the success rate of this attack? Is…
Noone Noone
  • 51
  • 7
1
vote
0 answers

Problem while using Reaver WPS

I was trying to crack my WiFi Router. I have two laptops an older one(Lenevo 3000 G430) and a newer one(HP Elitebook 840 G3) with their internal adapter. The old one has BCM4312 802.11b/g chipset and the newer one has Intel Dual Band Wireless AC…
Tanmay B
  • 11
  • 1
  • 2
1
vote
0 answers

Display filter to see WPS attempts in WireShark

My neighbour is actively trying WPS pins on my router - I know because the "WiFi/WPS" LED on my router lit up when I have permanently turned it off! I double checked the setting using the router admin page through ethernet and it confirmed LED's…
Dev Kanchen
  • 121
  • 3
1
vote
0 answers

Bully and reaver not finding anything in any network

I have been trying out reaver and bully on my network and friends network, multiple different routers, but none of them finds anything. The command for reaver that I run is: reaver -i wlan0mon -c 6 -b xx:xx:xx:xx:xx:xx -vv -N -L -S -K 1 The…
Reaverguy
  • 11
  • 2
1
vote
3 answers

Does use of WEP only open the network to attacks in proximity of the router?

I'm learning about security, and discovered my family's router was set to use WEP, with WPS enabled. I've fixed that, but I couldn't give a great answer for why it was necessary, given that we live in a suburban neighborhood with friendly neighbors…
HammerN'Songs
  • 113
  • 4
1
vote
0 answers

Using Reaver in various UK routers results in stop after 90% progress

I've been trying to make use of the current wifi audition techniques in regards of Router Password retrieval. GEAR: I've been through car boot sales and acquired some of the current routers on the market. I've been using a Raspberry Pi Model 3B+…
FakuVe
  • 11
  • 1
1
vote
1 answer

Speed up Reaver attack on router

I am trying to get the WPS pin by Reaver attack. The code I run is reaver -b (bssid) -c (channel) -i wlan0mon -vv It takes too much time guessing the WPS pin because it starts counting from 0000****. The router I am trying to hack is TP-Link and I…
Abu Bakar Jiyon
  • 11
  • 1
1
vote
1 answer

What does it mean when Reaver returns a PIN but no passphrase?

Usually when it's done, the WPA passphrase/password is listed immediately below the WPS PIN. Any idea what it means when it's absent from the results? I also tried entering the PIN directly, using the -p(--pin=) flags to no avail. Here's what it…
voices
  • 1,649
  • 7
  • 22
  • 36
1
vote
1 answer

WPS. Output messaging translation to "human readable"

I'm trying to test the wifi security of my router at home. It has WPS activated. I know WPS should deactivated, I'm only testing... Reaver is "spitting" a lot of messages, the question is: What is the meaning of all of that messages? This is a…
Siracuso
  • 91
  • 1
  • 11
1
vote
1 answer

What should I do if my adapter isn't capable of packet injection?

I tried the aireplay test but it said "No Answers" instead of "Injection is working". I also get error of List of possible errors (which also includes packet injection problem) when trying to associate with aireplay. But my adapter is in monitor…
Slim Shady
  • 171
  • 1
  • 2
  • 8
1
vote
1 answer

Wi-Fi Protected Setup PIN method EAP Messages

Let's look at this example: router (access point) has 8-digit PIN (printed on label) and laptop wants to connect to network using WPS PIN. So user give router's PIN into laptop and laptop sends PIN to router that verify is it correct or not. This…
Mateusz Zaborski
  • 11
  • 3
1
vote
1 answer

reaver - [!] WARNING: Failed to associate with xx:xx:xx:xx:xx:xx (ESSID: (null))

I am familiar with dict-password cracking but I recently moved on to reaver. When I run reaver, it pops up with an error [!] WARNING: Failed to associate with xx:xx:xx:xx:xx:xx (ESSID: (null)). I searched for some methods to solve it, but every…
Thhollev
  • 11
  • 1
  • 2
0
votes
1 answer

WPS and WPA2 connection methods

Do clients use WPS every time when they connect to a WPS-enabled AP? Or maybe they do it just the first time and then they switch to a normal WPA/WPA2 key exchange? If the latter, it's possible for an AP to force a client to use WPS every time?
Gianluca Ghettini
  • 121
  • 5
1 2
3
4