#### {{title}}

{{version}}

### Controls

Dependencies |  |
wps |

#### Install dependencies

All required dependencies have to be installed first. This may take a few minutes.
Please wait, do not leave or refresh this page. Once the install is complete, this page will refresh automatically.

#### Remove dependencies

All required dependencies will be removed. This may take a few minutes.
Please wait, do not leave or refresh this page. Once the remove is complete, this page will refresh automatically.

#### Running Process

Process | SSID | MAC | Channel
--- | --- | --- | ---
{{ proc.name }} | {{ proc.ssid }} | {{ proc.mac }} | {{ proc.channel }}

#### Options

Command
Program
Monitor
BSSID
ESSID
Channel
Options
Auto detect the best advanced options for the target AP
Do not associate with the AP (association must be done by another application)
Do not send NACK messages when out of order packets are received
Use small DH keys to improve crack speed
Ignore locked state reported by the target AP
Terminate each WPS session with an EAP FAIL packet
Target AP always sends a NACK [Auto]
Mimic a Windows 7 registrar [False]
Set exhaustive mode from the beginning of the session [False]
Set initial array index for the first half of the pin [False]
Set initial array index for the second half of the pin [False]
Set into PixieLoop mode (doesn't send M4, and loops through to M3) [False]
Enables logging of sequence completed PixieHashes
Do NOT run reaver to auto retrieve WPA password if pixiewps attack is successful
[1] Run pixiewps with PKE, PKR, E-Hash1, E-Hash2, E-Nonce and Authkey (Ralink, Broadcom & Realtek)
Display non-critical warnings
Display PixieHashes / enable pixiedust modes
Only display critical messages
Advanced
Set the delay between pin attempts [1]
Set the time to wait if the AP locks WPS pin attempts [60]
Quit after num pin attempts
Set the time to sleep after 10 unexpected failures [0]
Set the receive timeout period [5]
Set the M5/M7 timeout period [0.20]
Sleep for y seconds every x pin attempts
Default Pin Generator by devttys0 team [1] Belkin [2] D-Link
Options
Bruteforce the WPS pin checksum digit
Force continue in spite of warnings
Sequential pins (do not randomize)
Test mode (do not inject any packets)
Disable ACK check for sent packets
Skip CRC/FCS validation (performance)
Detect WPS lockouts unreported by AP
EAP Failure terminate every exchange
Ignore WPS locks reported by the AP
M5/M7 timeouts treated as WSC_NACK's
Packets don't contain the FCS field
Use probe request for nonbeaconing AP
Assume radiotap headers are present
Masquerade as a Windows 7 registrar
Suppress packet throttling algorithm
Advanced
Starting pin index (7 or 8 digits) [Auto]
Seconds to wait if the AP locks WPS [43]
Starting pin number (7 or 8 digits) [Auto]
Verbosity level 1-3, 1 is quietest [3]
Resend packets N times when not acked [2]
Delay M seconds every Nth nack at M5 [0,1]
Delay M seconds every Nth nack at M7 [5,1]

#### Interfaces

Interface
Monitor

#### Scan Results {{accessPoints.length}}

Warning: a monitor interface has to be enabled to display WPS information.
Search

SSID | MAC | Encryption | Cipher | Auth | Channel | Frequency | Signal | Quality | WPS
--- | --- | --- | --- | --- | --- | --- | --- | --- | ---
Hidden {{ accessPoint.ssid }} |  | {{ accessPoint.encryption }} | {{ accessPoint.cipher }} | {{ accessPoint.auth }} | {{ accessPoint.channel }} | {{ accessPoint.frequency }} Ghz | {{ accessPoint.signal }} | {{ accessPoint.quality }}% | {{ accessPoint.wps }}

No scan results...

#### {{title}}

    {{output}}

#### Output

Auto-refresh

    {{output}}

#### History {{history.length}}

Date | Action
--- | ---
{{entry[0]}} |

No history...

#### View History - {{historyDate}}

    {{historyOutput}}