evilsocket / evilsocket/pwnagotchi

WPS attacks (Pixie dust and PIN Bruteforce)

Open
#334 1 comment 22 reactions 0 assignees View on GitHub
enhancement
Dominant language
Python
Stars
9.2k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

It would be nice if pwnagotchi could be more intrusive and perform various WPS attacks.
Like [Pixie Dust](https://kalilinuxtutorials.com/reaver-pixewps/) and regular [PIN bruteforce](https://tools.kali.org/wireless-attacks/reaver).
It will allow connects to AP's and get internet access in AI mode.

Since WPS pin bruteforce is time consuming attack, it can be started only if AI detects that unit is not moving and stays in one place for a while. Pixie attack can be run more often, because it's not consuming so much time.

Bettercap does not support WPS attack, and this is a problem. I don't know what is the good way to implement this feature except add this type of attack to bettercap.

Contributor guide

Open the contributing guide

Research direction

No implementation file, test, or entry point is named. Start by locating how pwnagotchi integrates with Bettercap and reviewing the available interfaces for WPS operations. Done would require a defined approach for Pixie Dust and PIN brute force, including when AI mode may start them.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
networking, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
15/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.