WPS Pixie Dust Attack (Offline WPS Attack)

[soxrok2212]

Like send it malformed packets and make it trigger a PBC? That's an interesting idea. I remember a while ago i was doing some packet maniulation scripting and i found scapy to be VERY useful for the project i was doing. Probably be a good tool to use for that.

You took the words right out of my mouth, thats exactly what I was thinking. I actually had 3 ideas.

1: Trigger PBC
2: Trigger AP to accept a client's WPS pin
3: Send an M8 packet to attempt to reconfigure the AP

I'm not so sure that any of these ideas will work since I'm no super hacker or programmer, but it is just something I see possible

Also, there has been updates to tkiptun-ng: http://download.aircrack-ng.org/wiki...kip_master.pdf