Reaver(1)
β¨ NAME β¨
Reaver β bestie, this is the WPS Cracker π
π¦ SYNOPSIS π¦
reaver -i <interface> -b <target bssid> -vv
πΈ DESCRIPTION πΈ
Okay so Reaver runs a brute force attack against WiFi Protected Setup, and the way it can crack the WPS pin of an access point in a matter of hours and then recover the WPA/WPA2 passphrase after?? it's giving main character energy, no cap. π
Specifically β and this is the part that lives in my head rent free β Reaver targets the registrar functionality of WPS, which is lowkey flawed in that it only takes 11,000 attempts to guess the correct WPS pin in order to become a WPS registrar. And once you're registered as a registrar with the access point, the access point will just hand you the WPA passphrase. Like. It's that easy. πβ¨
π OPTIONS π
-m,--mac=<mac>β MAC of the host system (it should be resolved automatically, so like, it usually just knows π«Ά)-e,--essid=<ssid>β ESSID of the target AP. Unless it's cloaked, this will be resolved automatically too β¨-c,--channel=<channel>β Set the 802.11 channel for the interface (heads up bestie, this implies-f)-o,--out-file=<file>β Send output to a log file [default:stdout]-f,--fixedβ Disable channel hopping π«π¦-5,--5ghzβ Use 5GHz 802.11 channels-v,--verboseβ Display non-critical warnings (and-vvfor more, obviously)-q,--quietβ Only display critical messages π€«-i,--interface=<wlan>β Name of the monitor-mode interface to use-b,--bssid=<mac>β BSSID of the target AP π―-p,--pin=<wps pin>β Use the specified WPS pin-h,--helpβ Show help
π AUTHOR π
This manual page was written by Craig Heffner <cheffner@tacnetsol.com>, Tactical Network Solutions. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or any later version published by the Free Software Foundation β and the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL. π
And that's the whole thing, bestie!! Version 1.3, dated 29 December, 2011 β iconic behavior from the General Commands Manual era. slay, stay safe, and only point this at networks you actually own πβ¨π
π¦ where this page comes from
- arch rolling: reaver 1.6.6-2 Β· GPL2
- debian bookworm: reaver 1.6.6-0.1 Β· GPL-2.0-only
- debian trixie: reaver 1.6.6-2+b1 Β· GPL-2.0-only
- fedora 43: reaver 1.6.6-16.fc43 Β· GPL-2.0-only
- fedora 44: reaver 1.6.6-17.fc44 Β· GPL-2.0-only
- ubuntu jammy: reaver 1.6.5-1 Β· GPL-2.0-only
- ubuntu noble: reaver 1.6.6-2build2 Β· GPL-2.0-only
- ubuntu questing: reaver 1.6.6-2build2
- ubuntu resolute: reaver 1.6.6-2build3 Β· GPL-2.0-only
- ubuntu stonking: reaver 1.6.6-2build3 Β· GPL-2.0-only
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms