[Support] WPS

[GermanMeat]

The biggest help was starting at the command line. The trick is to make sure you're using wlan1 as your mon interface to start off with. I also primarily use the ethernet port to connect to it while its near by.

5. Is up to you. You can do the same thing on the web interface. Just disable the wlan1 interface, enable monitor mode on wlan1, then use the infusion. Or continue to use the command line with "screen" to allow you to disconnect without quitting reaver.

By the way, I installed "tmux" and uninstalled "screen". So much easier to use, will customize tmux.conf

[SlimPickens]

Thats ok, I understand.

If i do ifconfig wlan2 down and start monitoring,

ehat to do with wlan0 and wlan1? Do i need to enable them or disable, or down or up?

if I'm not using the interface I'd put it down until you're 100% comfortable with what each interface is doing.

[GermanMeat]

wifite.py is a great script but it doesn't crack WPS pins.

Hu?, what do you mean? It's in the python and ive done it.

[thesugarat]

wifite uses Reaver. It does not natively crack WPS pins.

[cheeto]

Hey guys,

Are any of you having any success with Mark 5´s reaver?

I´m not.

Here´s what I´m doing:

GO TO THE WPS menu

1: Start monitor mode wlan1

2: start mon0

3: Refresh AP´s

4: Select target

5: In the general tab, I select mon0

hit start then I get this after a while:

wps log_1401144578.log [May 26 2014 23:46:52]

[+] Waiting for beacon from C8:xx:xx:xx:xx:xx

[!] WARNING: Failed to associate with C8:xx:xx:xx:xx:xx (ESSID: xxxxxxxx)

[!] WARNING: Failed to associate with C8:xx:xx:xx:xx:xx (ESSID: xxxxxxxx)

[!] WARNING: Failed to associate with C8:xx:xx:xx:xx:xx (ESSID: xxxxxxxx)

[!] WARNING: Failed to associate with C8:xx:xx:xx:xx:xx (ESSID: xxxxxxxx)

[!] WARNING: Failed to associate with C8:xx:xx:xx:xx:xx (ESSID: xxxxxxxx)

[!] WARNING: Failed to associate with C8:xx:xx:xx:xx:xx (ESSID: xxxxxxxx)

[!] WARNING: Failed to associate with C8:xx:xx:xx:xx:xx (ESSID: xxxxxxxx)

I placed an X over the mac and ssid. But anyway, I want to mention that I did unlock this AP with KAli. So I know it can be done.

Can anyone give me a hand on this one.

Thanks guys,

cheeto

[Mutje]

This warning has nothing to do with WPS lock.

It seems your wlan1 is out of range to associate to the given AP.

[raz0r]

Whistle Master

Any update as to getting bully to save over 64.5KB m8 ?

Thanks

Raz0r

[cheeto]

Figured it out.

Mark v and Reaver only work on WLAN0. Is this normal?

I'll make a small video tutorial on a step by step method for newbies like myself. (coming soon)

Cheers

[raz0r]

Thats not the case buddy !!

Your should be using wlan1, enable monitor mode then disable the adaptor.

Take a look here m8 https://forums.hak5.org/index.php?/topic/31454-support-wps/page-7 (137 by slimpickens)

Just apply his method to the infusion ;)

Regards

Raz0r

[cheeto]

Thanks for the heads up Ra0r.

I will test it tonight and get back to you!!

Thanks!!!!

steve

[cheeto]

Raz0r,

I tried setting up a reaver attack on my own Dlink Dir655 router that is set up in WPS mode.

Did not work in both wlan0 and wlan1.

I changed the mac address on wlan1.

I made sure that my Wlan1 has a different channel than my wlan0.

The distance between my MK V and my Dlink router = 1 meter.

Here's what im doing:

1) log into my Mk v

2) go to wifi manager

3) enable WLAN1

4) start monitor mode

5) exit menu and click WPS on the main menu

6)) click Refresh AP´s with WLAN1

7) selct my Dlink Dir655 (as a victim)

8) Select Reaver as a attack method

9) Select monitor interface: mon0

10) Select auto-refresh ON

11) Select START

Regarding your suggestion, are you saying that I would have to ssh into my Mk v in order to get it to work with Reaver?

Isn't the UI version of Reaver the same as the traditional version in Kali?

Sorry for my confusion, I´m sure the problem is not the MKV, it´s me. I really want to learn.

Any suggestion would be appreciated.

Thanks!!!

[raz0r]

Ill do a vid for you hang fire ;)

Raz0r

[Foxtrot]

This seems related to the infusion, not related to the actual program, right?

[raz0r]

Vid done for you for some reason it got stuck but you get the gyst of it !!

http://www.sendspace.com/file/5fz53h

Regards

Raz0r

[cheeto]

Raz0r,

As soon as i saw your post, I canceld my meeting here at work. This is amazing.

Up to now I must have seen it 10 times already!

Thanks SO MUCH FOR THE STEP BY STEP tutorial.

Last night when trying to get this thing to work, I was do exactly what you did in the video.

EXCEPT:

I noticed that you 1st ENABLED AND LATER DISABLED WLAN1 in the logical interface.

Is that correct? If you disable Wlan1 how can you get a mon0? (using wlan1)

Another thing i didn´t do was to check the boxes in the advance menu.

I can´t wait to get home and test this puppy out!!!!!! (12 more hours before i get off work, this is torture!!!)

THANKS BRO.

[raz0r]

You need to enable it to scan for APS then disable it and start monitor mode on wlan1. it will work m8 trust me

The reason i checked them boxes was so it remembers where i left off just in case it gets canceled some how and i don't have to restart the bloody thing again i highly recommend using that first box ;).

The next box was so i get verbose out put and could see any errors using -vv but i just type in the box -v I'm not to worry about the verbose just sometimes nice to see whats going on.

Don't forget the M5 M6 messages are good to see :)

Kind Regards

Raz0r

[cheeto]

Thanks SO MUCH Raz0r.

OK, so then my possible problem was that i wasn´t disabling my wlan1.

I thought I needed Wlan1 enabled in order to enable monitor mode. MY BAD.

I´ll get back to you tonight when i get home. I´m really looking forward to this.

Cheers,

Cheeto

[raz0r]

You can enable monitor mode while wlan1 is enabled BUT what you need to do is disable wlan1 before the attack ;) other wise it wont work

Kind Regards

Raz0r

[iluvethreeway]

Nice video but as i see you recieve the same error msg than me ( transaction failed 0x02 and trying the same pin for ages = not working ) any way to make it WORK?

[raz0r]

Mine works fine m8 i was rushing ill do another one sec lol

Also you need to be close to the AP for less errors :)

http://www.sendspace.com/file/rxgx8u

Regards

Raz0r

Edited May 29, 2014 by raz0r

[cheeto]

You can enable monitor mode while wlan1 is enabled BUT what you need to do is disable wlan1 before the attack ;) other wise it wont work

Kind Regards

Raz0r

OK, that seems to be crystal clear to me. Honestly, I would have never guessed that it was necessary to disable wlan1.

Thanks!! (crossing my fingeres that it works tonight.)

[raz0r]

I also wouldn't have thought that as i don't have to do it in Kali Linux i was getting frustrated my self until i read something on here.

Just strange that you don't have to do it on Kali, maybe someone else here could answer your question :)

Raz0r

[cheeto]

Ya, with Kali Reaver worked fine. So I know reaver works fine.

For this reason I know problem is "me" not the Mkv.

Just curious, is the Wlan1 disable technique used in other infusions? Say.... Karma?

cheers,

cheeto

[raz0r]

Not that i know of i have only been using a few infusions on there at the moment.

Also take a look at bully but use the -C command i find that works good but you need to be close to the AP or have a very good antenna

To be honest i leave mine at work lol i stick with Kali at the min cos i can get my jobs done very quick using it in VM player :)

But the Mark V is a great tool just need more time with it.

Regards

Raz0r

Edited May 29, 2014 by raz0r

[cheeto]

Good point regarding bully. I've never tried it but I heard it may be actually better than Reaver.

As for the Antenna, I'm planning on buying an outdoor antenna just to have some fun. ;).

It´s hard trying to find a suitable directional Antenna.

Cheers,