Pixiewps
๐ก Wireless ยท C
Pixiewps is a tool used to brute force offline the WPS PIN exploiting the low or non-existing entropy of some software implementations. This is known as the Pixie Dust attack, which exploits weak random number generation in the WPS protocol implementation of many routers. While Reaver performs online brute force (trying PINs against the router one by one), Pixiewps works offline - it captures the WPS exchange data and computes the PIN locally, typically recovering it in seconds rather than hours. The attack works because many router manufacturers use predictable values (like the router's own BSSID or timestamp) to seed the random number generator used in the WPS Diffie-Hellman key exchange. Pixiewps is typically used in conjunction with Reaver or Bully, which handle the network interaction while Pixiewps performs the offline computation.
Installation
apt (Debian/Ubuntu)
$ sudo apt install pixiewpsfrom source
$ git clone https://github.com/wiire-a/pixiewps && cd pixiewps && make && sudo make installUse Cases
- Recovering WPS PINs in seconds using the Pixie Dust offline attack
- Testing router WPS implementations for weak random number generation
- Combining with Reaver or Bully for automated WPS PIN recovery
- Auditing wireless networks for vulnerable WPS configurations
Tags
Details
- Category
- ๐ก Wireless
- Language
- C
- Repository
- wiire-a/pixiewps
- Platforms
- ๐งlinux
Links
Alternatives & Comparisons
Aircrack-ng
CComplete suite for WiFi network security assessment. Monitoring, attacking, testing, and cracking.
Compare Pixiewps vs Aircrack-ngWifite2
PythonAutomated wireless attack tool. Wraps aircrack-ng, reaver, and hashcat for streamlined WiFi auditing.
Compare Pixiewps vs Wifite2Reaver
CWPS brute force attack tool. Exploits Wi-Fi Protected Setup to recover WPA/WPA2 passphrases from WPS-enabled routers.
Compare Pixiewps vs Reavermdk4
C802.11 protocol exploitation toolkit. Authentication floods, beacon floods, deauth attacks, and SSID fuzzing for wireless testing.
Compare Pixiewps vs mdk4More in Wireless
Aircrack-ng
CComplete suite for WiFi network security assessment. Monitoring, attacking, testing, and cracking.
Bettercap
GoSwiss army knife for WiFi, Bluetooth, and ethernet network recon and MITM. Scriptable with JS.
Wifite2
PythonAutomated wireless attack tool. Wraps aircrack-ng, reaver, and hashcat for streamlined WiFi auditing.
Kismet
C++Wireless network detector, sniffer, wardriving tool, and IDS. WiFi, Bluetooth, Zigbee, and more.
Flipper Zero Firmware
CCustom firmware for Flipper Zero. Sub-GHz, RFID, NFC, infrared, and GPIO hacking multi-tool.
Fluxion
ShellWPA security auditing tool that uses social engineering for handshake capture via evil twin attacks.