Hello,
there are 10^7 elements in WPS pin space, because one of the 8 digits are used as checksum. But the AP validate each half separately, resulting in 11,000 valid pins. Its possible to generate all these 11k pins to a wordlist? Or its possible to filter the list of 10^7 pins resulting only in valid pins?
So we can test the reduced set randomically and increase the chance of success.
Thanks!