pixiewps

pixiewps doesn’t talk to an AP itself — it takes the public keys, hashes, and nonces captured from a WPS exchange and, if the AP’s random number generator is weak (a real, common firmware bug), brute-forces the PIN offline in seconds instead of the hours a live reaver or bully brute-force would take. Both of those tools call pixiewps automatically when run with their own Pixie-Dust flags (reaver -K, bully -d) — you’d only invoke it directly if reconstructing an attack from raw captured exchange values by hand.

It lives at Security → Wireless Attacks → pixiewps.

The help it prints

Show the full output58 lines
 Pixiewps 1.4 WPS pixie-dust attack tool
 Copyright (c) 2015-2017, wiire <[email protected]>

 Description of arguments:

 -e, --pke

     Enrollee's DH public key, found in M1.

 -r, --pkr

     Registrar's DH public key, found in M2.

 -s, --e-hash1

     Enrollee hash-1, found in M3. It's the hash of the first half of the PIN.

 -z, --e-hash2

     Enrollee hash-2, found in M3. It's the hash of the second half of the PIN.

 -a, --authkey

     Authentication session key. Although for this parameter a modified version of Reaver or Bully is needed, it can be avoided by specifying small Diffie-Hellman keys in both Reaver and Pixiewps and supplying --e-nonce, --r-nonce and --e-bssid.

 [?] pixiewps -e <pke> -s <e-hash1> -z <e-hash2> -S -n <e-nonce> -m <r-nonce> -b <e-bssid>

 -n, --e-nonce

     Enrollee's nonce, found in M1.

 -m, --r-nonce

     Registrar's nonce, found in M2. Used with other parameters to compute the session keys.

 -b, --e-bssid

     Enrollee's BSSID. Used with other parameters to compute the session keys.

 --mode N[,... N]

     Select modes, comma separated (experimental modes are not used unless specified):

         1 (RT/MT/CL)
         2 (eCos simple)
         3 (RTL819x)
         4 (eCos simplest) [Experimental]
         5 (eCos Knuth)    [Experimental]

 -7, --m7-enc

     Encrypted settings, found in M7. Recover Enrollee's WPA-PSK and secret nonce 2. This feature only works on some Access Points vulnerable to mode 3.

 [?] pixiewps -e <pke> -r <pkr> -n <e-nonce> -m <r-nonce> -b <e-bssid> -7 <enc7> --mode 3

 -5, --m5-enc

     Encrypted settings, found in M5. Recover Enrollee's secret nonce 1. This option must be used in conjunction with --m7-enc. If --e-hash1 and --e-hash2 are also specified, pixiewps will also recover the WPS PIN.

Examples

# You normally never run this by hand — reaver's -K/--pixie-dust flag calls it
# for you, feeding it the values it just captured live:
sudo reaver -i wlan0mon -b AA:BB:CC:DD:EE:FF -K -vv

# The manual form, reconstructing the same attack from values captured
# separately (e.g. with a modified reaver/bully or a packet capture):
pixiewps -e <pke> -r <pkr> -s <e-hash1> -z <e-hash2> -n <e-nonce> -m <r-nonce> -b <e-bssid>