WPS Pixie Dust Attack (Offline WPS Attack)

[soxrok2212]

Hrm, that gave me an idea. I can hook up to a router(uart, spi sniffing, or whatever) and see what goes on inside the router during a wps transaction. See if there is anything exploitable.

Do it! Lemme know if you find anything.

--If we find something, I'll start a new thread since its not really Pixie Dust related.

[aanarchyy]

Do it! Lemme know if you find anything.

--If we find something, I'll start a new thread since its not really Pixie Dust related.

I'll see what i can get done tonight, even if i can find a way to freeze/reset/dos the router it would be useful for reseting wps locks

[soxrok2212]

I'll see what i can get done tonight, even if i can find a way to freeze/reset/dos the router it would be useful for reseting wps locks

Yeah, a reset would be excellent. I've been trying a bunch of ways but haven't been successful. I've been thinking about probing an AP hundreds of times per second with invalid characters in order to reset it... haven't been able to try that yet (MDK3 doesn't support this operation... yet )