Totu

There's been a lot of talk about WLAN probes on the show, but is there a way to capture WLAN traffic with Wireshark/Tshark and see which client MAC is probing for what SSID(s)? I've tried running Tshark with subtype probereq, but the feed is filled with broadcast messages and I'm only interested in what clients are looking to connect to specific SSID. For that matter is something like this even possible with Wireshark or should I be looking for a different tool?

You probably could get a huge performance boost out of this method if you tweaked your PIN list a little. Most common PINs would be any combinations with all same numbers like 0000, 1111, 2222, 3333, etc. So you should probably try thous first then things like 1234, 1212, 4321, 6969. Because people like patterns and people are lazy and don't wan't to remember more than two numbers. Just my two cents.