https://www.hackers-arise.com/single-po ... ith-Reaver
this is used to guess the 8 digit pin code that can setup the router.
tool specially designed to brute-force the WPS PIN named Reaver , built into Kali and other Linux security distributions,
Step #1:Reconnaissance for WPS Enabled AP's
locate AP's that have WPS enabled and not locked. Use recon tool called wash with Reaver.
Put your wireless interface into monitor (promiscuous) mode with airmon-ng.
Code: Select all
airmon-ng start wlan0
Code: Select all
wash -i <interface>
Step #2 Cracking the PIN with Reaver
Code: Select all
reaver -i wlan0mon -b <BSSID> -S -v
- wlan0mon is the name of our wireless device in monitor mode
BSSID is the MAC address of the AP we are attacking