[zombiefied]

Cracking WPA and WPA2 with Reaver
What you need:

1. A computer with a *nix Operating system.
   
2. A wireless c@rd that supports monitor mode.
   
3. aircrack-ng
   
4. Reaver
   
5. Some spare time
   

Okay, so first of all you want to put your wireless c@rd into monitor mode. This can by typing

Code:

sudo ifconfig wlan0 down

Code:

sudo iwconfig wlan0 mode monitor

Code:

sudo ifconfig wlan0 up

into your terminal. Most network c@rds call themselves wlan0, if your c@rd goes by another name, replace wlan0 with its name.

Our c@rd is now in monitor mode, and it is called mon0. We are going to look for networks with WPS enabled, so type

Code:

wash -i mon0

into your terminal, after a while you can stop the scan with ctrl+c. If you see a Access Point with no under "WPS locked", write down the bssid.

Now we are going to start bruteforcing the WPS key! Type

Code:

reaver -i mon0 -c 1 -b (BSSID of AP) -vv

This will probably take quite a while, it usually takes between 2 to 8 hours so have patience.

When this is finished, it will show you the WPS key and the WPA password! Enjoy your newly cracked network connection!

Excuse my leetspeak, apparently i'm typing spam words.

[mothered]

Provided the AP Is vulnerable to WPS, I personally found Reaver to be very effective Indeed.

It 's great you've Included the "wash -i" command to find WPS APs.
A simple, yet very effective tutorial.
A job well done.

[swatterhat]

Too bad, My NIC does not support this. Thanks anyway.

[DestructoSphere]

I prefer to use bully for a few reasons, mainly because it is more verbose and can auto resume interrupted sessions.

[zorrophreak]

Maybe I can become more active at my other house now that I might be able to get into its WiFi, and I might be able to get faster WiFi up at the school! Nice share. Also going to check out what @DestructoSphere mentioned.

[Cyber Warrior]

Nice tutorial, you could write more informations so the beginners can understand what they are typing. Thanks for sharing btw.

[BiscuitEdi]

Honestly I haven't seen a lot of wps vulnerable routers since 2014.

[mothered]

Honestly I haven't seen a lot of wps vulnerable routers since 2014.

I have to agree with this.

Back when I was cracking WPS PINs sometime In 2009/2010, when scanning wireless APs, there were quite a few available. In fact, probably the majority were WPS-enabled.

[The_Joker]

I just scanned near my house yesterday. Found 5/6 WPS-enabled and 1 with good old WEP security.

[pvnk]

The l33t was too much for me.