A Few Tips to note when Hacking WiFi.

Over the years, I gathered a few Simple `Tricks` for Breaking WiFi Security.

1) MAC Filter Bypass:
Blocked by an AP for WPS or even connecting? Use Macchanger.

Hidden Content

You must

[To see links please register here]

or

[To see links please register here]

to view this content.

2) Increase WiFi Adapter PWR.
Let's say your WiFi device is set to wlan1.

Hidden Content

You must

[To see links please register here]

or

[To see links please register here]

to view this content.

Hidden Content

You must

[To see links please register here]

or

[To see links please register here]

to view this content.

Hidden Content

You must

[To see links please register here]

or

[To see links please register here]

to view this content.

Hidden Content

You must

[To see links please register here]

or

[To see links please register here]

to view this content.

(Optional) ^^^

Hidden Content

You must

[To see links please register here]

or

[To see links please register here]

to view this content.

3) Convert Second OUI Portion of MAC from Hex to Dec.
Some Routers have a Vulnerability, whereby you take the last 6 AlphaNumeric Hex Values and convert to Decimal.
An Example being AA:BB:CC:DD:EE:FF
Convert DD:EE:FF to Decimal, and append it to Reaver with --pin=""

4) Ralink WPS Vuln.
All Ralink Chipsets are Vulnerable to "Pixie Dust" Attack, Ralink is also VERY Common on "Boosters/Repeaters"
Pwn the Repeater, and you got the PSK for the Main AP.

5) Atheros WPS Vuln
Most current Atheros Chipsets are Vulnerable to NULL Pin Attack.
--pin=NULL , --pin="" , --pin=' ' --pin="NULL"

6) Reset Older APs with MDK3/4's Beacon Flood.
If you are blocked by WPS with Rate limiting.
You can remotely DoS the AP by flooding it with thousands of Beacons.
Resetting the Remote Router will cause it to reset the WPS Lock Flag.

If all else Fails, Rouge AP.
Social Engineering is Human's Biggest Flaw.

Peace.

whats the use of this? cant remember ever having had to use my mac-adress.

Ralink WPS Vuln.
Atheros WPS Vuln

Back In the good old days of BackTrack, I clearly remember cracking WPS PINs with Reaver.

It was quite effective with a very good success rate.

(03-21-2021, 11:14 AM)mothered Wrote:

[To see links please register here]

Ralink WPS Vuln.
Atheros WPS Vuln

Back In the good old days of BackTrack, I clearly remember cracking WPS PINs with Reaver.

It was quite effective with a very good success rate.

It still is :smile: I guess it depends on where you live.
There's plenty of Vuln Ralink & Atheros round where I live.

(03-21-2021, 01:36 PM)VioleXOR Wrote:

[To see links please register here]

It still is :smile: I guess it depends on where you live.
There's plenty of Vuln Ralink & Atheros round where I live.

Yes, you're right.

I haven't used Reaver since BackTrack was discontinued. The only downside, was the repeated loop when trying the same pin.