domains / families / security / offensive-wps

offensive-wps

separate

WPS (Wi-Fi Protected Setup) PIN attack methodology — Pixie Dust offline attack against vulnerable chipsets (Ralink, Realtek, Broadcom, MediaTek), online PIN brute-force with reaver/bully, lockout handling, time-of-day evasion, WPS push-button vulnerability windows, and PIN-to-PSK derivation. Use when a target SOHO router exposes WPS — common on consumer ISP gear, often left enabled by default even when WPS attacks have been known for over a decade.

When to use

• Pixie Dust offline attack
• Online PIN brute-force
• Lockout handling
• Time-of-day evasion
• WPS push-button vulnerability windows
• PIN-to-PSK derivation
• Detecting WPS-enabled APs
• Vendor-specific PIN calculation

Skill page

Source