WPS Pixie Dust Attack (Offline WPS Attack)

[X999]

Nice tools specially with K 1 K 2 and K 3
But not work with my tplink router.. when im put with correct pin.. reaver work awesome.

Have idea make reaver can use pin list created with crunch?

Examples: reaver -i wlan0mon -b 11:22:33:44:55:66 -c 11 -p /root/pins.txt

If the router not active wps locked... reaver will famous tools for hack wpa/wps

Thanks just idea.. ☺

[soxrok2212]

What would the benefit be? Reaver follows a et sequence and Bully just chooses PINs at random. There will always be 11,000 possibilities not matter what.

[kcdtv]

Have idea make reaver can use pin list created with crunch?

Reaver doesn't have such option... but It is not very hard to do though :
Create your PIN dictionary following the pattern used for *.wpc file :
- You put 0 for the 3 numbers used as headers (index p1 - index p2 - boolean number for getting or not the first half )
- You put your 10000 first half
- You put your 1000 second half (last digit is a checksum, reaver generates it live)
Call your file whatever.wpc and when you launch reaver just use the -s option with the full path to your *.wpc file

-s, --session=<file>            Restore a previous session file

have a look to some *.wpc file you will understand how it works...

by the way : why yo didn''t ask this question in the thread about reaver instead of here