Setup a router with WPA or WPA2 for encryption and give it a password. There are many more commands to use with Reaver, you can see them all by typing “reaver /?”. The example I am using below is a basic one. Reaver has many options or switches it can use to deal with these problems. Also some routers can crash if too many pins get thrown at it quickly much like a denial of service attack can crash a PC. Reaver does not attempt to take on the WPA encryption itself, but goes around it using WPS and then displaying the password.” (PCM)Īs with other attacks there are some problems with this such as signal strength, a strong signal is almost a must. Reaver exploits a flaw in these PINs and the result is that, with enough time, it can reveal your WPA or WPA2 password. It is a feature that exists on many routers, intended to provide an easy setup process, and it is tied to a PIN that is hard-coded into the device. If a router has WPS enabled it can usually be cracked in two – ten hours. Reaver starts by running through the pin numbers until it is found once it is found it will display the password. WPS uses pin numbers that are not encrypted. If a router has WPS enabled then cracking the encryption is no longer necessary. The problem with WPS is, it has a flaw in it that lets someone go around the encryption. WPS makes it easy for wireless devices to find and connect to a router. Reaver works by a flaw found in routers called WPS or Wi-fi Protected Setup. But when WPA became the standard it became much harder to do and using the dictionary attack method was the only real option. Before WPA was implemented and WEP ruled wireless encryption any network could be cracked easily. Reaver is one of the best tools to come along in a long time. Reaver -I mon0 -b (The BSSID) â€“vv (The -vv is two V not a W) Note: If you are using a updated version of Kali and aicrack-ng mon0 interface has been changed to wlan0mon. Next Creating a Dictionary / Wordlist with Crunch Part 8 Using Aircrack and a Dictionary to Crack a WPA Data CaptureĬracking a WPA Capture with the GPU using HashCat Getting a Handshake and a Data Capture, WPA Dictionary Attack Introduction To Kali and WiFi Pen Testing This is a multiple part series for someone new to wireless hacking, with pictures and videos.

How to use aircrack in kali linux