EN
ENNA

Pixiewps

๐Ÿ“ก Wireless ยท C

Pixiewps is a tool used to brute force offline the WPS PIN exploiting the low or non-existing entropy of some software implementations. This is known as the Pixie Dust attack, which exploits weak random number generation in the WPS protocol implementation of many routers. While Reaver performs online brute force (trying PINs against the router one by one), Pixiewps works offline - it captures the WPS exchange data and computes the PIN locally, typically recovering it in seconds rather than hours. The attack works because many router manufacturers use predictable values (like the router's own BSSID or timestamp) to seed the random number generator used in the WPS Diffie-Hellman key exchange. Pixiewps is typically used in conjunction with Reaver or Bully, which handle the network interaction while Pixiewps performs the offline computation.

1.7kstars
320forks
11issues
Updated 2y ago

Installation

apt (Debian/Ubuntu)

$ sudo apt install pixiewps

from source

$ git clone https://github.com/wiire-a/pixiewps && cd pixiewps && make && sudo make install

Use Cases

  • Recovering WPS PINs in seconds using the Pixie Dust offline attack
  • Testing router WPS implementations for weak random number generation
  • Combining with Reaver or Bully for automated WPS PIN recovery
  • Auditing wireless networks for vulnerable WPS configurations

Tags

wpspixie-dustoffline-attackwifibrute-forcehacking-toolwifi-security

More in Wireless