Wash tool shows us all the nearby devices that have WPS, wash also shows us what version of WPS they are running and if the devices have WPS locked or unlocked. Then proceed by putting your wireless adapter to monitoring state with: airmon-ng start wlan1Īfter that we call wash to the monitoring interface with the command: wash -i wlan1mon First update your softwares to make sure we have the latest versions. When the WPS is set to Enabled we start looking into access points that have WPS enabled with a tool called Wash. Our TP-Link had it off by default which is a good thing to keep off if you don’t want unwanted guests logged into you’r access point.

We start by enabling the WPS on our access point. This is what makes WPS cracking viable option. When actually attempting PIN by PIN on average you only need around 5500 attempts. On top of that the first 4 and the following 3 numbers are checked separately which leaves us with 11,000 options. The last number however is a checksum of the previous digits, and it can be predicted, that leaves us with 10 000 000 possible combinations. However the WPS has a severe fault, the 8 number PIN consists of numbers 0-9 which leaves us with 100 000 000 possible combinations. The idea behind WPS was, that the users do not need to remember long passwords and the people who set up the access point do not feel the need to setup a shorter password that is easier to remember. PIN code is usually on a sticker on your access point at the bottom of your device. You can connect your device into your access point with WPS by pressing a button on your access point and on your wireless device or you can also use a 8 number PIN code to connect into access point. Wi-Fi Protected Setup ( WPS) is a protocol created by Wi-Fi Alliance, and it’s goal is to allow for an easy way to connect devices to your Wi-Fi network.

Crack wpa2 xiaopan