Today you will learn cracking of a WPA / WPA2 Protected Wifi Password which has WPS ( push Button ) enabled on it.
What is Reaver ?
Reaver is a Linux based software which bruteforce the wps pins on the router which has wps / Push Button enabled and it comes pre loaded with Kali Linux OS.
What is WPS or Push Button ?
WPS/Push Button option comes with many routers / modems in which while connecting to a network you can avoid entering a password and can simply connect to your network by pressing a button inside your moddem / router.
What You Will Need To Perform This Attack ?
- WPS ( Push Button ) Enabled WIFI Network in Range
- Wireless Adapter
- Kali Linux OS
Get Started
Start Your Kali Linux OS and open terminal
1. Turn On your monitor interface by typing the below command
airmon-ng start wlan0
2. Check if there is any wps enabled wifi in your range.
To check the wps enabled network we will use wash command so type the below command and it will list all those networks which have wps enabled.
wash -i mon0 -C
Now this will display all those networks which have wps enabled so chose any network which has strong signals and after copy its BSSID
3. Start Cracking by typing the below command
reaver -i mon0 -b BSSID -vv
Here in this command " reaver -i mon0 -b BSSID -vv " in BSSID paste the BSSID Number which you want to crack and which you copied in past from above step and wait for about hours because this needs much time even 3-5 hours depending upon the pin code of the router which reaver will bruteforce and if the pin matches it will crack the password for you and will display the password.
How You can protect yourself from this attack ?
Well in my opinion for security reasons just disable the WPS option or if you really want to enable it then create hard and end custom pin as many routers come with default pin code which reaver can easily crack.
Click here and learn how to crack the password fastly with reaver
Reaver is great in cracking WPA/WPA2 Protected passwords and by brute forcing the WPS pins on the routers which have wps / push button enabled on them but the problem is that there are thousands of pins which reaver has to brute force and this requires much time to Hack the password.
But i have bought a solution for you in which you will be able to crack the wifi password in just 2-3 hours of average time which i have considered.
The logic is simple if you can understand , reaver current version brute force 8 digit pin code ( wps pin code ) and it took more time in cracking 8 digit pin code but if we command reaver to crack 4 digit of pin code in first session and the rest of 4 digit pin code in second session and in this way we can crack the wifi password easily in 2 - 3 hours and even less then in hour, like i myself cracked my wifi password in just 1 and half hour.
Command !
reaver –i mon0 –f –c “channel No” –a –b BSSID –v –d 0 -vv
Note:- Always try to hack the wifi which have strongest signals , because reaver will be able to inject the pin code easily in few seconds as when i was cracking reaver was injecting the pin code in less then second nearly a 1 second per pin and this took me 1 and half hour in cracking.
Error,s solutions
Majority of peoples are noob and they get few errors and then they dont know what to do.
If you are getting ( 0x30 ) or ( 0x03) error then please try to hack the router which have strongest signals this error means that the router which you are cracking has low signal strength.
WPS failed to inject pin or something like this error then there are possibly few reasons behind this.
- The router which you are cracking is advance router which is not easy to crack because when reaver tried to brute forced bunch of pins with combination one after another then router itself blocked us from sending the request to enter the pin code for this we will try to use the advance option in reaver which will check the AP limit for router and will wait for few seconds after injecting the pin. just after the command put -a and done.
- The router which you are trying to hack has wps locked or dose not contain wps enabled.
If you are facing any problem kindly do comment and i will be able to answer your question as soon as possible.
I have been working on reaver from almost years and i love to share my experience so you can enjoy and learn.
Many of users got some sort of errors like "WPS transaction failed (code: 0x02) " This error occurs because of the following reasons mentioned below.
Many of users got some sort of errors like "WPS transaction failed (code: 0x02) " This error occurs because of the following reasons mentioned below.
- Low Signal Strength
- Weak Firewall of Router or Modem
- WPS is Locked
#1 Low Signal Strength
If you have low signals i.e above -80dbi or below 20dbi then you must have such type of error because reaver is unable to link its wps pin connection with router.
#2 Weak Firewall of Router
Yes , this is also one of the big reason why peoples get such type of error , the logic behind this is a bit logical i.e when reaver sends wps pin to router or modem and it accepts and after few successful pin attempts router go down because reaver is sending him request,s massively which cause router to crash and after reaver will be unable to inject the further pins into router.
Solution :-
You can command reaver to wait for few seconds after each pin attempt for this you will use " -d 3 " after your command and 3 means to wait for 3 seconds and after inject the another pin.
Example is belowreaver -i mon0 -b BSSID -c Channel No -d 3 -w -vv
#3 WPS is locked
Yes if wps is locked then you can not inject your pins via reaver , it must be unlocked and to find that wps is locked you can type the below command.
wash -i mon0
You can also try my trick which i use to unlock some routers who have locked wps. i usually dos attack on routers which cause the routers to restart themselves.
I Perform this attack using MDK3 and you can also give it a try by typing the below command
mdk3 mon0 a -a bssid
This will dos the router and cause him to restart himself and when its restarted , wps will be unlocked.
And also learn how to jam wifi in your area so you can create panic between the owner of router in which i am sure he will restart the router or will remove the security and to learn click here.
And if you are new to kali linux , reaver before typing any above command type the below command to enable your monitor interface
airmon-ng start wlan0
