wangxiaodong1021/reaver-wps

Change request: add parameter that for the first 4 digits

Closed this issue · 12 comments

It happened to me that the first 4 digits were already cracked, and it was 
coming down to the last section (3 digits + checksum). But then the AP 
disappeared/crashed etc. 

I would like to tell the program to use the first 4 digits of the pin that i 
have previously obtained for further cracking.

Sounds like a small addition, and could be very useful.



Original issue reported on code.google.com by stefanen...@gmail.com on 30 Dec 2011 at 12:13

Temporarily created workaround by setting the correct p1 value index in
build_wps_pin() just before pin is created. (Not the prettiest solution)

set_p1(1, "4770"); //Use argv value here.
set_p1_index(1);

Original comment by stefanen...@gmail.com on 30 Dec 2011 at 1:17

I would also find a parameter for the complete PIN very useful. 
I know of no utility that can simply display an AP's WPA password with a known 
WPS PIN. A useful way to recover a lost key since they can never be found in 
plain text once entered in either an AP or Windows (except Vista I think).

Correct me if I'm wrong and such tool exists!

In that regard a resume capability with logfile similar to besside-ng would be 
very handy. Obviously available in the government version.

Original comment by efs...@gmail.com on 31 Dec 2011 at 12:04

[deleted comment]
previous poster: it seems that an option for the complete pin has just been 
added

Original comment by jeanbar...@gmail.com on 31 Dec 2011 at 3:36

Only part of it has been added, you can only put the full code in, which is 
great for testing but you can't resume if you have to crash out of it after 
having the first 4 numbers.

Great addition though :)

Original comment by sc...@pieh0.co.uk on 1 Jan 2012 at 5:48

I just got caught out by this so i've made the changes. I'm not a member of the 
project so i'm attaching the changed source to this comment.

New option is -p<first 4 digits> or --pin=<first 4 digits>

./reaver -i mon0 -b <whatever> -p <digits>

get the source, copy the changes to the src folder and rebuild. I got my source 
from the 1.2 tar.gz rather than svn so you'll want to do the same.

Original comment by justin.b...@gmail.com on 2 Jan 2012 at 12:36

Attachments:

For the moment i've forked reaver to solve this issue plus a couple marked as 
wont-fix as they in a pay only version.

There's a fix for this in my fork of reaver. It's based on reaver 1.2 and fixes 
this plus a couple of other issues.

http://code.google.com/p/theiver/downloads/list

Happy to unfork at some stage if we can start getting these sorts of things in 
the free version - otherwise i'm happy to add stuff in the fork.

Original comment by justin.b...@gmail.com on 2 Jan 2012 at 4:33

I have also made a modified version with 2 new options:

-k    Turns on sequential order for 4 pin digits (0000, 0001, 0002 etc)
-s    Starting location

reaver -i mon0 -b 00:11:22:33:44:55 -k -s 1234   (would result in 1234, 1235, 
1236)

make distclean
./configure
make
make install

Original comment by Sca...@gmail.com on 2 Jan 2012 at 11:20

Attachments:

We won't be adding a resume option to the official Reaver code as that is 
currently reserved for the commercial version (see issue #28).

@justin: Your updates conflict a bit with the latest SVN, but I'll be updating 
--pin to support either a partial 4 digit pin or a full 8 digit pin.

Original comment by cheff...@tacnetsol.com on 2 Jan 2012 at 1:12

thanks I'll fix that now

Original comment by justin.b...@gmail.com on 2 Jan 2012 at 1:17

No worries justin, adding support for partial 4 pin entries to the --pin option 
was a 2 line code change. Just checked in. :)

Original comment by cheff...@tacnetsol.com on 2 Jan 2012 at 1:26

  • Changed state: Fixed
That's great. I've taken your changes and removed mine for the pin.

Original comment by justin.b...@gmail.com on 2 Jan 2012 at 2:20