WPS Brute Force Demonstration and Protection

A demonstration of a WPS brute force attack using the Reaver tool, followed by a brief discussion on how to disable WPS and/or verify if it is actually disabled.

Props: Big thanks to @devttys0 for providing clarification on interpreting the WPS tags in beacon frames. His input was invaluable.

More information regarding Reaver can be found at: http://code.google.com/p/reaver-wps/

Category:

Science & Technology

Tags:

• wifi
• wps
• pin
• reaver
• security
• wireless

[nnngggiii]

10 hour? does it make router to choke? or disconnect client who connected to that router.,and can client find out someones cracking there router?

thanks

[SimplyWiFi]

@nnngggiii Some routers have brute-force defences that will impose time penalties for failed attempts. Some routers will actually just fail under the pressure and kick everyone off the network or reset the wlan. It is technically possible to see an attack happening but it's really too involved for the average SOHO user who required WPS to exist in the first place.

[DjAdam16]

@Dpaz2009 That is the term though lol Its really funny "router will choke on packets"

[Dpaz2009]

hahha! it will choke up... funny. :-) great job !

[conspiritor2]

@SimplyWiFi OK thanks man, subbed to ya....

[SimplyWiFi]

@conspiritor2 It needs to be a feature of whichever platform you are doing your attack from. Most likely you'll be doing it from a laptop, so it needs to be a feature of the drivers used in whichever OS you happen to be running. Windows drivers are sorely lacking in monitor mode. There are some commercial Windows products that can do it but they cost quite a bit. Easier, and cheaper, just to use linux.

[conspiritor2]

@SimplyWiFi Shouldn't that be feature of router and not OS?

[SimplyWiFi]

@conspiritor2 Monitor mode is what allows the wireless interface to capture 'everything' it sees instead of just the stuff sent directly to it. Think of it as something similar to 'promiscuous' mode on wired interfaces.

[SimplyWiFi]

@nnngggiii Depends on the platform you are running it on. If you are using BackTrack then you should be able to use apt to update it. Or, you could just download the latest version from the Google code page directly.

[nnngggiii]

how to update reaver?

thanks