[Support] WPS

Whistle Master · January 13, 2015

I'm using airodump to produce a .cap file and then use wash to read it

#wash --help
-f, --file [FILE1 FILE2 FILE3 ...]   Read packets from capture files

the infusion looks like it does thibgs different. It doesn't run a wash scan, but rather scans via iw, saves an output and parses the output with wash -C -f.

With that in mind, I believe if you keep the wlan1 ( or whichever wlan iface you use to scan ) up, it would bring the results. Ill test annd post back

DataHead · January 13, 2015

I'm using airodump to produce a .cap file and then use wash to read it
#wash --help
-f, --file [FILE1 FILE2 FILE3 ...]   Read packets from capture files

don't know where I got iw from lol

lunokhod · January 18, 2015

I've been playing around with the WPS infusion these last few days... it seems to be working mostly OK.

I have an external radio (wlan2) a client interface (disabled), wlan0 is also disabled (no Pineapple AP operating), I'm connected to the WiFi Pineapple via eth0.

Reaver and Bully are installed and working (as confirmed with a SSH session).

enable wlan1,

enable mon0 on wlan1,

scan for WPS vulnerable access points,

pick a "target",

bring down wlan1,

select program, monitor interface, ensure BSSID, SSID and channel are correct,

Press Start!

Reaver works as expected.

Bully works but does not seem to update the xxxxxxxxxx.run file in /root/.bully/ properly. The .run file gets created, but there are times when the xxxxxxxxxxxx.run file appears to get corrupted (or not closed off properly) and Bully will not start when you try and "crack" that AP mac address again. Has anyone else seen this?

I seem only to be able to run Bully (via WPS infusion) only once per WiFi Pineapple boot... after stopping it (within the infusion), it does not start again... although I can start a CLI Bully session and it will continue.

I've seen the posts in this thread about creating symlinks for reaver and bully... does the WPS infusion work "better" when installed in internal memory than the SD card?

Lunokhod.

Edited January 18, 2015 by lunokhod

Retr0 · January 24, 2015

Hello, i am a newbie so i don't know a lot of what i am doing but i know my way around kali linux and used reaver before but i was just wondering how i can use reaver with wifi Pineapple I got an user infusion of WPS that has reaver on it but I don't know why whenever i try to use it it dose not work hear is what i am getting ( if you can't see image open it in a new tab) and i don't know how to make it work. Will someone help me ?

cheeto · January 24, 2015

i made a step by step tutorial on how to use reaver on the mkv. All credit goes to "raz0r" for teaching me how to use it.

https://forums.hak5.org/index.php?/topic/32748-howto-mark-v-reaver/

If reaver isn't giving you the desired results, it's probably because:

The AP isn't WPS.

The AP signal quality is rather low.

Cheers

Retr0 · January 24, 2015

Hello, i used reaver in the past but i was wondering how i can make it work with the Infusion "WPA" i start up reaver and when i do this it fails to associate with the network, i thought it was just the network so i booted into Kali Linux and found the password fine with reaver so i know the network vulnerable. Hear is the Error i get (If you can't see it right click on image and open in new tab)

cheeto · January 24, 2015

Far as i know, reaver only work with WPS.

Retr0 · January 24, 2015

yeah it works on routers with the Wi-Fi protected setup exploit i already crack the wifi network with Kali that i am trying to crack with the wifipineapple so i know it has the exploit but i am trying to see if the wifi pineapple can do it. (hint why i am cracking the same network as i did with Kali) So dose anyone else know what i am doing wrong or how to do it a different way

Edited January 24, 2015 by Prooakley

DataHead · January 24, 2015

Be sure you bring down your mon corresponding interface, wlan1, wlan2 etc

ARDETROYA · January 31, 2015

@All: could you try the following steps and report the output ?

- Restart your pineapple

- Connect through SSH:
# ifconfig wlan1 down
# airmon-ng start wlan1
# wash -i mon0 -C
Can you see APs ?

I don't want to be mean but... because you can't run the infusion does not mean there is a problem with the infusion itself. The problem could be from the binaries used (such as wash or reaver). All the testing I'm doing on my side report correctly all WPS enabled APs. That's said, I really want to make it work for you guys, just help me trying to shape the problem you're facing !

Hi wishtle Master... Thanx once more for your effort!!! Sorry that i have been a little bussy last months... I couldn´t see any AP but I used the commands that DataHead said and I could it make it work... Hope that helps.

I´m using firmware 2.2.0 and infusion version: 1.9.

If you have installed reaver to the sd, it seems to not set itself up properly in the way it symlinks from the sd. If installed to internal its all up and fine.

My proper sd install chain is such.

ssh into the pineapple and Copy paste the following

mkdir /etc/reaver

opkg update

opkg -d sd install reaver

ln -s /sd/etc/reaver/reaver.db /etc/reaver/

ln -s /sd/usr/bin/reaver /usr/bin/

ln -s /sd/usr/bin/wash /usr/bin/

ln -s /sd/usr/lib/opkg/info/reaver.control /usr/lib/opkg/info/

ln -s /sd/usr/lib/opkg/info/reaver.list /usr/lib/opkg/info/

#BULLY

opkg update

opkg -d sd install bully

ln -s /sd/usr/bin/bully /usr/bin/

ln -s /sd/usr/lib/opkg/info/bully.control /usr/lib/opkg/info/

ln -s /sd/usr/lib/opkg/info/bully.list /usr/lib/opkg/info/

Thanx DataHead for the informatión... It seems that it´s working but I have to do more test... Thanx for shareing ;)!

Using WLAN1 and MON0 of WLAN1 ;)

Edited January 31, 2015 by ARDETROYA

kalimer · February 3, 2015

i'm using bully on a network, reaver is not working on it but bully is.

i use the command line:

bully mon0 -b xxxxxxxxxxxxxxxxx -W --pin1delay 60,1 -c 3

bully is working, but i've a problem:

it starts good, then after some keys, it starts with a lot of auth/assn timeout errors, and stops to try new keys. wps is never locking with this delay, but i get A LOT "Received disassociation/deauthentication from the AP" and "Sent packet not acknowledged after 2 attempts" errors. my network is here right in front of me so no distance problem.

if i stop CTRL.C bully and then i start again after few seconds (like 10 seconds), the process begin again with no troubles, but then he will stop getting a lot of timeout errors.

[+] Loading randomized pins from '/root/.bully/pins'
[!] Restoring session from '/root/.bully/00223f3cf5c8.run'
[+] Index of starting pin number is '0291000'
[+] Last State = 'NoAssoc' Next pin '70808261'
[+] Rx( M5 ) = 'Pin1Bad' Next pin '57948263'
[+] Rx( M5 ) = 'Pin1Bad' Next pin '80368267'
[+] Rx( M5 ) = 'Pin1Bad' Next pin '46648266'
[+] Rx( M5 ) = 'Pin1Bad' Next pin '91118264'
[+] Rx( Assn ) = 'Timeout' Next pin '91118264'
[+] Rx( M5 ) = 'Pin1Bad' Next pin '17198264'
[+] Rx( Assn ) = 'Timeout' Next pin '17198264'
[+] Rx( Auth ) = 'Timeout' Next pin '17198264'
[+] Rx( M5 ) = 'Pin1Bad' Next pin '62788267'
[+] Rx( Assn ) = 'Timeout' Next pin '62788267'
[+] Sent packet not acknowledged after 2 attempts
[+] Tx(DeAuth) = 'Timeout' Next pin '62788267'
[+] Sent packet not acknowledged after 2 attempts
[+] Tx(DeAuth) = 'Timeout' Next pin '62788267'
[+] Sent packet not acknowledged after 2 attempts
[+] Tx(DeAuth) = 'Timeout' Next pin '62788267'
[!] Received disassociation/deauthentication from the AP
[+] Tx(DeAuth) = 'NoAssoc' Next pin '62788267'
[+] Rx( Auth ) = 'Timeout' Next pin '62788267'
[+] Rx( Assn ) = 'Timeout' Next pin '62788267'
[+] Sent packet not acknowledged after 2 attempts
[+] Tx( Strt ) = 'Timeout' Next pin '62788267'
[+] Rx( ID ) = 'Timeout' Next pin '62788267'
[+] Rx( Assn ) = 'Timeout' Next pin '62788267'
[+] Rx( Auth ) = 'Timeout' Next pin '62788267'
[+] Rx( Auth ) = 'Timeout' Next pin '62788267'
[+] Rx( Auth ) = 'Timeout' Next pin '62788267'
[+] Rx(M2D/M3) = 'Timeout' Next pin '62788267'
[+] Rx( Assn ) = 'Timeout' Next pin '62788267'
[+] Rx( Auth ) = 'Timeout' Next pin '62788267'
[+] Rx( Assn ) = 'Timeout' Next pin '62788267'
[+] Rx( Auth ) = 'Timeout' Next pin '62788267'
[!] Received disassociation/deauthentication from the AP
[+] Rx( Auth ) = 'NoAssoc' Next pin '62788267'
[+] Rx( Assn ) = 'Timeout' Next pin '62788267'
[+] Rx( M5 ) = 'Pin1Bad' Next pin '41578261'
[+] Rx( Assn ) = 'Timeout' Next pin '41578261'
[+] Rx( M5 ) = 'Pin1Bad' Next pin '34408261'
[+] Sent packet not acknowledged after 2 attempts
[+] Tx( ID ) = 'Timeout' Next pin '34408261'
[+] Rx( Auth ) = 'Timeout' Next pin '34408261'
[+] Sent packet not acknowledged after 2 attempts
[+] Tx( Auth ) = 'Timeout' Next pin '34408261'
[+] Rx( Auth ) = 'Timeout' Next pin '34408261'
[+] Sent packet not acknowledged after 2 attempts
[+] Tx(DeAuth) = 'Timeout' Next pin '34408261'
[+] Rx( Assn ) = 'Timeout' Next pin '34408261'
[+] Rx( Assn ) = 'Timeout' Next pin '34408261'
[+] Rx( Assn ) = 'Timeout' Next pin '34408261'
[+] Sent packet not acknowledged after 2 attempts
[+] Tx(DeAuth) = 'Timeout' Next pin '34408261'
[+] Rx( Auth ) = 'Timeout' Next pin '34408261'
[+] Rx( Auth ) = 'Timeout' Next pin '34408261'
[!] Received disassociation/deauthentication from the AP
[+] Rx( Auth ) = 'NoAssoc' Next pin '34408261'
[+] Sent packet not acknowledged after 2 attempts
[+] Tx( Auth ) = 'Timeout' Next pin '34408261'
[+] Sent packet not acknowledged after 2 attempts
[+] Tx(DeAuth) = 'Timeout' Next pin '34408261'
[+] Rx( Auth ) = 'Timeout' Next pin '34408261'
[+] Rx( ID ) = 'Timeout' Next pin '34408261'
[+] Rx( Assn ) = 'Timeout' Next pin '34408261'
[+] Sent packet not acknowledged after 2 attempts
[+] Tx( Strt ) = 'Timeout' Next pin '34408261'
[+] Rx( Auth ) = 'Timeout' Next pin '34408261'
[+] Rx( Assn ) = 'Timeout' Next pin '34408261'
[+] Rx( Auth ) = 'Timeout' Next pin '34408261'
[+] Rx( Assn ) = 'Timeout' Next pin '34408261'
[+] Rx( M5 ) = 'Pin1Bad' Next pin '37978266'
[+] Sent packet not acknowledged after 2 attempts
[+] Tx( Strt ) = 'Timeout' Next pin '37978266'
[!] Received disassociation/deauthentication from the AP
[+] Rx( Assn ) = 'NoAssoc' Next pin '37978266'
[+] Rx( Assn ) = 'Timeout' Next pin '37978266'
[+] Rx( Assn ) = 'Timeout' Next pin '37978266'
[+] Rx( M5 ) = 'Pin1Bad' Next pin '57778266'
[+] Rx( Assn ) = 'Timeout' Next pin '57778266'
[+] Rx( M5 ) = 'Pin1Bad' Next pin '29028269'
[+] Sent packet not acknowledged after 2 attempts
[+] Tx( Strt ) = 'Timeout' Next pin '29028269'
[+] Rx( Auth ) = 'Timeout' Next pin '29028269'
[!] Received disassociation/deauthentication from the AP
[+] Rx( Assn ) = 'NoAssoc' Next pin '29028269'
[+] Rx( Auth ) = 'Timeout' Next pin '29028269'
[+] Rx( M5 ) = 'Pin1Bad' Next pin '88218267'
[+] Rx( M5 ) = 'Pin1Bad' Next pin '81158263'
[+] Rx( Auth ) = 'Timeout' Next pin '81158263'
[+] Rx( Auth ) = 'Timeout' Next pin '81158263'
[!] Received disassociation/deauthentication from the AP
[+] Tx( Auth ) = 'NoAssoc' Next pin '81158263'
[+] Sent packet not acknowledged after 2 attempts
[+] Tx(DeAuth) = 'Timeout' Next pin '81158263'
[+] Rx( M5 ) = 'Pin1Bad' Next pin '92988262'
[+] Rx( Assn ) = 'Timeout' Next pin '92988262'
[+] Rx( Auth ) = 'Timeout' Next pin '92988262'
[+] Rx( ID ) = 'Timeout' Next pin '92988262'
[+] Sent packet not acknowledged after 2 attempts
[+] Tx( Strt ) = 'Timeout' Next pin '92988262'
[+] Rx( ID ) = 'Timeout' Next pin '92988262'
[+] Rx( Assn ) = 'Timeout' Next pin '92988262'
[+] Rx( Auth ) = 'Timeout' Next pin '92988262'
[+] Rx( M5 ) = 'Pin1Bad' Next pin '77548269'

as you can see i got keys tested, but sometimes it starts to give a lot of timeout error and process stops.

Lord_Snake · March 24, 2015

Dear Community,

Unfortunatly I don't have the skills to do it, so is it posible to a dev port/create an infusion with this script?

I'm sure that it would be a great addition to the mark V :D

fringes · March 24, 2015

Have you looked through the WPS infusion support thread? https://forums.hak5.org/index.php?/topic/31454-support-wps/

It's huge I know, but you might find some similar discussions there. (I think that's where I saw it.)

student13 · March 25, 2015

Ok, thanks I saw the video, but still have a question , when the wps infusion is put into monitor mode , and detects wps, does it, actually detect differentiate between wps 1.0 ie a vulnerable version of wps, versus a non vulnerable version ( like wash), or does it detect WPS service, irrespective version vulnerability.

fringes · March 25, 2015

Sorry Lord_Snake, I actually referred you back to this topic. (It's the medication.) But look through this topic because I believe something like this script has been discussed here.

DataHead · March 25, 2015

If you have installed reaver to the sd, it seems to not set itself up properly in the way it symlinks from the sd. If installed to internal its all up and fine.

My proper sd install chain is such.

ssh into the pineapple and Copy paste the following

mkdir /etc/reaver

opkg update

opkg -d sd install reaver

ln -s /sd/etc/reaver/reaver.db /etc/reaver/

ln -s /sd/usr/bin/reaver /usr/bin/

ln -s /sd/usr/bin/wash /usr/bin/

ln -s /sd/usr/lib/opkg/info/reaver.control /usr/lib/opkg/info/

ln -s /sd/usr/lib/opkg/info/reaver.list /usr/lib/opkg/info/

Been having issue's with reaver and bully for a while but after doing these commands all worked great, reaver/bully both run as they should.

The only issue i'm having now is, there is no infusion installed for them, not a major one as i prefer cli anyways.

~Thanks DataHead for the fix's :)

If you are having issues with wash, please do the above.

The wps infusion uses wash to gather the needed wps info

Edited March 25, 2015 by DataHead

SaAlWe · April 5, 2015

Good day , I have the WIFI PINEAPPLE been around for a long time and have tried them and packed away as I NEVER did not get a single time to run WPS . Today I am a little busy with her I have my own wireless WPS ACTIVATED ! AND NOTHING HAPPENS ! I have now tried it many times but it just is not what is really a pity ! Have paid so much for the router and it just does NOT EVEN !

Sorry for my English google transla ...

----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

wps log_1428224057.log [April 05 2015 09:19:41]

[+] Waiting for beacon from 1C:C6:3C:14:DE:F0

[+] Associated with 1C:C6:3C:14:DE:F0 (ESSID: SaAlWe)

[+] 0.00% complete @ 2015-04-05 08:54:38 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:54:54 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:55:10 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:55:26 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:55:43 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:55:58 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:56:15 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:56:31 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:56:47 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:57:08 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:57:24 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:57:41 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:58:02 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:58:19 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:58:35 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:58:51 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:59:07 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:59:23 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:59:39 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 08:59:56 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:00:16 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:00:32 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:00:48 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:01:04 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:01:24 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:01:41 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:01:57 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:02:13 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:02:33 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:02:49 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:03:10 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:03:42 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:03:58 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:04:15 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:04:31 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:04:47 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:05:02 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:05:19 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:05:35 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:05:51 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:06:07 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:06:23 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:06:40 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:06:56 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:07:12 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:07:28 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:07:43 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:07:59 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:08:16 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:08:37 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:08:58 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:09:15 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:09:31 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:09:48 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:10:11 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:10:28 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:10:50 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:11:07 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:11:22 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:11:38 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:11:55 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:12:11 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:12:27 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:12:43 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:13:04 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:13:20 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:13:41 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:13:56 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:14:11 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:14:27 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:14:43 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:14:58 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:15:14 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:15:29 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:15:44 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:16:05 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:16:20 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:16:36 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:16:51 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:17:06 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:17:22 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:17:37 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:17:53 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:18:08 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:18:23 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:18:39 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:18:55 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:19:10 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:19:25 (0 seconds/pin)

[+] 0.00% complete @ 2015-04-05 09:19:41 (0 seconds/pin)

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

SaAlWe · April 5, 2015

And when i use bully the same sh...

------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

wps log_1428225656.log [April 05 2015 09:24:15]

[!] Bully v1.0-22 - WPS vulnerability assessment utility

[+] Switching interface 'mon0' to channel '3'

[!] Using '00:13:37:93:54:4c' for the source MAC address

[+] Datalink type set to '127', radiotap headers present

[+] Scanning for beacon from '1c:c6:3c:14:de:f0' on channel '3'

[+] Got beacon for 'SaAlWe' (1c:c6:3c:14:de:f0)

[+] Loading randomized pins from '/root/.bully/pins'

[+] Index of starting pin number is '0000000'

[+] Last State = 'NoAssoc' Next pin '01964301'