t6x / reaver-wps-fork-t6x

1.68k stars 401 forks source link

No -K option on install. #151

Closed xxRockOnxx closed 7 years ago

xxRockOnxx commented 7 years ago

On my other machine the -K option exists and is even in the example but on my Ubuntu 17.04 it doesn't have that.

Tried removing directory and cloning again but no luck. Why is this? It's like the regular reaver only

kcdtv commented 7 years ago

If you check the program description in first page it is explained: The feature is temporary removed in order to code it "cleanly" (not as it was) To do a pixie wps attack you can use -Z or -K Once the PIN is found with a pixedust you just have to send it with the option -p. Cheers

xxRockOnxx commented 7 years ago

Uhm, again? Not clear. I was asking -K was not present but you are suggesting

To do a pixie wps attack you can use -Z or -K

soxrok2212 commented 7 years ago

You probably installed reaver from the Ubuntu repo... likely is Reaver 1.4. Remove any existing installation and try to install from source here again.

kcdtv commented 7 years ago

I was asking -K was not present but you are suggesting

I answered you and I told you that it is explained in first page:

-K and-or -Z // --pixie-dust (in reaver)

The -K and -Z option perform the offline attack, Pixie Dust (pixiewps), by automatically passing the PKE, PKR, E-Hash1, E-Hash2, E-Nonce and Authkey variables. pixiewps will then try to attack Ralink, Broadcom and Realtek detected chipset. Special note: If you are attacking a Realtek AP, do NOT use small DH Keys (-S) option. User will have to execute reaver with the cracked PIN (option -p) to get the WPA pass-phrase. This is a temporary solution and an option to do a full attack will be implemented soon

What isn't clear for you?

rofl0r commented 7 years ago

i suspect he runs "reaver" without arguments and doesn't see "-K" in the help text/usage output, since it is indeed missing! i forgot to add it when i implemented the pixiedust attack in f78f896ad9135d3795f5e03aa555002503b0c85c. proposed fix:

diff --git a/src/wpscrack.c b/src/wpscrack.c
index e21b19a..b228c45 100644
--- a/src/wpscrack.c
+++ b/src/wpscrack.c
@@ -174,6 +174,8 @@ int usage(char *prog_name)
         fprintf(stderr, "\t-E, --eap-terminate             Terminate each WPS session with an EAP FAIL packet\n");
         fprintf(stderr, "\t-n, --nack                      Target AP always sends a NACK [Auto]\n");
        fprintf(stderr, "\t-w, --win7                      Mimic a Windows 7 registrar [False]\n");
+       fprintf(stderr, "\t-K, --pixie-dust                run pixiedust attack\n");
+       fprintf(stderr, "\t-Z,                             run pixiedust attack\n");

         fprintf(stderr, "\nExample:\n\t%s -i mon0 -b 00:90:4C:C1:AC:21 -vv\n\n", prog_name);
xxRockOnxx commented 7 years ago

@rofl0r so it's there but not just in the help output?

@soxrok2212 I didn't install from the repo. I cloned and and installed this one.

rofl0r commented 7 years ago

@xxRockOnxx yes. is that what you meant when you talked about that it's missing?

xxRockOnxx commented 7 years ago

Yes. Thank you for clearing it up. Should close this :)