WPS Attack Algorithm

There are two main types of WPS attack algorithms:

Online and Offline

Online to crack the PIN code by sending requests to the access point over the network. Offline attacks, on the other hand, do not require access to the network, and instead rely on captured handshake data.The most common online WPS attack algorithm is Reaver. Reaver works by sending a series of requests to the access point, and then analyzing the responses to determine the PIN code. The attack is typically successful within a few hours, depending on the complexity of the PIN code. There are also a number of offline WPS attack algorithms available. One of the most common is Pixie Dust. Pixie Dust works by exploiting a vulnerability in the WPS protocol that allows an attacker to obtain the PIN code without having to interact with the access point. The attack is typically successful within a few minutes.

Reaver is a free and open-source tool that can be used to brute-force WPS PINs. Reaver works by sending a series of deauthentication packets to the target Wi-Fi router. These deauthentication packets force the router to disconnect all connected devices. Once all devices are disconnected, Reaver then attempts to connect to the router using the WPS PIN. If the PIN is incorrect, Reaver will try the next PIN in the list. This process continues until the correct PIN is found.

The primary method employed by Reaver involves initiating a series of deauthentication packets sent to the targeted Wi-Fi router. By flooding the router with these deauthentication packets, Reaver effectively forces the router to disconnect all devices connected to it. This disruption in the connection enables Reaver to exploit the weaknesses in the WPS protocol.

Once the router has disconnected all devices, Reaver proceeds to systematically attempt to establish a connection with the router by guessing the WPS PIN. The WPS PIN is typically an eight-digit numeric code used to authenticate devices to the router without the need for a lengthy passphrase. Reaver operates by cycling through a list of possible PIN combinations, attempting each one until it either successfully connects or exhausts all the options.