Reaver

A tool to perform a brute force attack against Wi-Fi Protected Setup (WPS) registrar PINs.

Visit Website →

Overview

Reaver is a specialized tool designed to exploit a vulnerability in the Wi-Fi Protected Setup (WPS) feature of many wireless routers. It performs a brute-force attack against the WPS registrar PIN. Because the PIN is validated in two halves, Reaver can significantly reduce the number of attempts needed to find the correct PIN. Once the PIN is discovered, the WPA/WPA2 passphrase can be recovered.

✨ Key Features

  • Brute-force attack against WPS PINs
  • Recovers WPA/WPA2 passphrases from vulnerable routers
  • Can save session progress to resume later
  • Includes 'wash' tool to scan for WPS-enabled networks

🎯 Key Differentiators

  • One of the original and most well-known WPS attack tools
  • Highly effective against the specific WPS vulnerability

Unique Value: Provides a direct and effective method to recover WPA/WPA2 passphrases from routers with a specific, common vulnerability (WPS).

🎯 Use Cases (3)

Testing routers for the WPS vulnerability Penetration testing of wireless networks with WPS enabled Recovering WPA/WPA2 keys on vulnerable access points

✅ Best For

  • Successfully cracking the WPS PIN of older or unpatched routers.

💡 Check With Vendor

Verify these considerations match your specific requirements:

  • Attacking networks without WPS enabled
  • Attacking modern routers with brute-force protection (lockout policies)

🏆 Alternatives

Bully Wifite PixieWPS

Focuses solely on the WPS PIN attack, making it simpler for that specific task than broader tools like Wifite. The PixieWPS attack, often used with Reaver, can be much faster than a full brute-force.

💻 Platforms

Desktop

✅ Offline Mode Available

💰 Pricing

Contact for pricing
Free Tier Available

Free tier: Full functionality, open-source.

Visit Reaver Website →