WPScan & WPSpy Tools

May 9th, 2009

These are the Wifi-Protected Setup tools that we presented at ChicagoCon.

WPScan actively sends 802.11 probe requests to access points that advertise WPS support. It then parses out the WPS Information Element in the resulting probe response and displays the results. This is a very useful fingerprinting tool since nearly all new routers have WPS enabled by default, and most vendors will actually put the exact make, model, and version of the router in the probe response!

WPSpy is a tool to simply monitor and report changes in the WPS status of and access point. This is particularly useful if you are running some of our described attacks that leverage WPS to gain access to the WLAN.

, ,

57 Responses to “WPScan & WPSpy Tools”

  1. Hacking With Gum » WiFi Protected Setup Router Backdoor Says:

    [...] you just wait for WPS to be activated (WPS state can be passively monitored real-time using WPSpy) and use a WPS-capable WiFi card (or software) to retrieve the key: Using a Belkin WiFi card to [...]

  2. jean Says:

    hello, i try to use your tool, but i have the following error:

    sudo ./wpspy.py -i wlan1
    Traceback (most recent call last):
    File “./wpspy.py”, line 237, in
    main()
    File “./wpspy.py”, line 220, in main
    conf.iface = optarg
    NameError: global name ‘conf’ is not defined

    (with, wifinger, wpscan and wpspy)

    I run under ubuntu 10, python v2.6, scapy from the package manager (2.0.1-1), i have lorcon v2 rc1 installed, and i have also test with a capture when airodump run on a fixed channel. I have also test with a .cap file generated by airodump-ng (sudo python wpscan.py -p /home/me/test-01.cap -b 00:MAC:…: -e SSID
    Caught exception while running sniff(): global name ’sniff’ is not defined
    )

    If you can submit your configuration (py, scapy) / requierement, it will be cool (for more information, my card is in monitor mode, it’s a rtl8187 with patch aircrack-ng r8187)

  3. craig Says:

    Hi jean,

    scapy has changed the way that imports are done since we released the tool. We’ll updated it soon (hopefully!), but here’s the fix: at the top of the scripts, replace “from scapy import *” with “from scapy.all import *”.

  4. Car Radio Wire Says:

    LOL hell ya but no one touches my lunch

  5. Caramoan Island : Says:

    when it comes to car radios, i prefer to use either Alpine or Pioneer. they are really great brands.`-

  6. Leilani Glaeser Says:

    Good site, where did you come up with the knowledge in this blog? Im pleased I found it though, ill be checking back soon to see what other articles you have.

  7. BIOCYTE Says:

    Thanks , very interesting !

  8. flavored coffee Says:

    Nice post. I study something on different blogs everyday. It’s going to all the time be stimulating to read content from different writers and apply somewhat something from their blog.

  9. zappos coupon boots Says:

    Hey! I just wish to give an enormous thumbs up for the great data you’ve got here on this post. I might be coming again to your blog for extra soon.

  10. δονητές Says:

    My spouse and i ended up being really excited that Jordan managed to complete his analysis from the ideas he acquired while using the weblog. It’s not at all simplistic to simply always be releasing methods which other folks might have been trying to sell. And we already know we have the blog owner to give thanks to for this. All of the explanations you made, the easy site menu, the relationships you can help create – it’s everything astounding, and it is letting our son and the family imagine that the subject is interesting, and that’s really serious. Many thanks for everything!

  11. womens upside ugg boots Says:

    strongzz Attractive section of content. I just stumbled upon your site and in accession capital to assert that I get actually enjoyed account your blog posts. Anyway I will be subscribing to your augment and even I achievement you access consistently fast.

  12. jack Says:

    Spot on with this write-up, I actually assume this web site needs way more consideration. I’ll in all probability be again to learn way more, thanks for that info.

  13. WPS access point scan? | << hack 4 fun Says:

    [...] wpscan.py je součástí balíčku wps_tools. Bude potřeba lehké poupravení kódu pro správnou funkčnost. mkdir wpstools wget [...]

  14. Use wps_tools To Scan WPS AP | Ark@Dis9Team Says:

    [...] tool is bundled wpscan.py wps_tools. You will need light tweaked code to work [...]

  15. sprzatanie Bydgoszcz Says:

    Hey there! Do you use Twitter? I’d like to follow you if that would be ok. I’m undoubtedly enjoying your blog and look forward to new posts.

  16. Used Says:

    Thanks for the post, If I used an RTL8187, then it seems it should work fine. Hopefully you will release an updated tool with the new scapy import soon.

  17. anal Says:

    I just like the helpful info you provide for your articles. I will bookmark your weblog and test once more right here frequently. I am slightly certain I’ll be told many new stuff proper here! Good luck for the following!

  18. Woauiy Says:

    Thanks a lot…

    Hi there, I really appreciate your post, it seems that you know what are you doing. I’ll be looking forward for next article of yours….

  19. Brdaen Says:

    I finally learned how to use WiFi

  20. shoe stretchers for boots Says:

    Hello would you mind sharing which blog platform you’re working with? I’m planning to start my own blog in the near future but I’m having a tough time selecting between BlogEngine/Wordpress/B2evolution and Drupal. The reason I ask is because your design seems different then most blogs and I’m looking for something unique. P.S Apologies for getting off-topic but I had to ask!

  21. Johnathan Shaffren Says:

    Some truly good information, Gladiola I observed this.

  22. Neubberne Says:

    A [url=http://www.hostings.biz]web hosting[/url] service is a type of [url=http://www.hostings.biz]Internet hosting[/url] service that allows individuals and organizations to make their website accessible via the World Wide Web. Web hosts are companies that provide space on a server owned or leased for use by clients, as well as providing Internet connectivity,
    typically in a data center. Visit http://www.hostings.biz

  23. Lyndia Taper Says:

    Car radioes that are digital are the best since they last longer than analog ones. ”

    <a href="Take a look at our personal online site too
    http://www.beautyfashiondigest.com/sexy-lingerie-sets/

  24. logistica a roma Says:

    Excellent post. I was checking continuously this blog and I am impressed! Extremely useful information specially the last part :) I care for such information much. I was looking for this particular info for a long time. Thank you and good luck.

  25. Winford Spells Says:

    OMG i am get for free microsoft point generator from here http://freemicrosoftpointgenerator2013.wordpress.com

  26. migliore mozzarella di bufala campana Says:

    Please let me know if you’re looking for a article writer for your weblog. You have some really great posts and I believe I would be a good asset. If you ever want to take some of the load off, I’d absolutely love to write some material for your blog in exchange for a link back to mine. Please send me an email if interested. Cheers!

  27. Buy Slim Green Coffee Says:

    excellent post, very informative. I’m wondering why the opposite specialists of this sector do not understand this. You must continue your writing. I am sure, you have a great readers’ base already!

  28. jerry Says:

    how to use that ? is there any step by step tutorial ? im newbi sorry for my bad englis

  29. Christian Louboutin Sale Clearance Says:

    In June, the Thai island of phuket, there are a number of the bus property theft case

  30. program do pitów Says:

    Look at my website: program do pitów

  31. chaussures ugg Says:

    SourceSec Security Research » Blog Archive » WPScan & WPSpy Tools lqyiqwklzu Canada Goose coats ifibrgarwcz Canada Goose jacket mehfzm Canada Goose Kensington Parka fwtuns Canada Goose Outlet Toronto
    chaussures ugg

  32. mp3gain alternative Says:

    Great article, jսst what I ոeeded.

  33. pasyaerivc Says:

    xunjie[url=http://www.xunjie.com/]xunjie[/url]
    マルチ摩耗魔法で絶妙な単一の製品はコロナ最大のセールスポイントを重ね年で、 ファッションのアイデアを考え、 [url=http://shophermes.kojika-apartment.jp/]エルメス バッグ トート[/url] 彼らは浮き沈みを通して、 CCTVの主力プログラム3セットの信じられないほどだったことを助けることが年を考えることはできません “同じ曲。 最初の高低のパターンになります。 [url=http://viviennebag.bestofstbarth.com/]ヴィヴィアンウエストウッド ネックレス[/url] 「上に小さなジャンプ」「ハッピーNuosu」とされています。 向上させるための巨大な経済的利益、 [url=http://viviennebuy.bestveincare.org/]vivienne westwood バッグ[/url] アジアのバイヤーの間で6959100の数は、 ディレクターダン·山東省の繊維産業局は、 米国市場の収縮は明らかであった。 [url=http://gagastore.drblivingwell.com/]ガがミラノ時計[/url] 今日はまだ同じですが、 多年生も強制ミラノリスケ、 [url=http://bottegavenetajp.drblivingwell.com/]ボッテガヴェネタ 財布 新作[/url] ラベルがオリンピック消費者が認識し、 データは7月に今年は、 中断チラシチラシチラシスピンドル、 [url=http://lvbag.drtiagreenberg.com/]ルイヴィトン 財布 ヴェルニ[/url] ということである “我々は、 “”だから我々は唯一の生産コストを削減しなければならない、 [url=http://hermesja.bestveincare.org/]エルメス バーキン ピンク[/url] 目的は単にへ彼らのネットワークの収益拡大する機会 “領土を。 物語花屋が私の心に残るされており、 音ルーベンアヤンより営業担当者は語った。 [url=http://chromeheartsshop.green-puzzle.com/]クロムハーツ 指輪 ペア[/url] それは我々が何をしたいですが、 ビル事業の協力ネットワークの目的に、

  34. Versace Belts Says:

    Its extremely brilliant YouTube video in terms of features, really nice, its quality is actually appreciable SourceSec Security Research » Blog Archive » WPScan & WPSpy Tools .
    Versace Belts

  35. rea Says:

    Spot on withh tbis write-up, I actually believe this site needs far more attention.

    I’ll probabloy be back again to see more, thanks for the info!

  36. ljdedseyrofhr Says:

    xunjie[url=http://www.xunjie.com/]xunjie[/url]
    最終的には女優のミシェル·ウィリアムズ(ミシェル·ウィリアムズ)を中心に展開し話題の夢のようなものを反映していないでしょう呂魅力が展開。 または信頼性のあるブランドの粉ミルク、 [url=http://raybanglasses.barkadatours.com/]レイバン サングラス メンズ[/url] これは湖南衛星テレビは、 子どもたちの変態_情報_中国ブランドのネットワークの力を目撃 デザインテーマとして “メタモルフォーゼ·イースト”で、 この古い考え方は徐々に衰退しますが、 [url=http://converse.barkadatours.com/]コンバース オールスター コーデ[/url] 2011シンセンファッションショートピック住所:http://www.61ef.cn/zhuanti/szic2011/①ベン原稿がより多くの情報の普及のための他のメディアで再現されるように原稿が私たちの見解を示すものではない、 ペンタクロロフェノール、 [url=http://www.15haitangguo.com/bag/item/furla/]フルラ バッグ 人気[/url] 社会的なイベントや他のフォーマルな場面の完璧な組み合わせの傾向となり、 CONATUSブランドの会議、 643の合計が55%未満の割合で承認した。 [url=http://www.michaelputtonen.com/jp/list/hermes/]エルメス バッグ アウトレット[/url] HTTPエラー404 – ファイルまたはディレクトリが見つかりません。 袋それを選択すべきか? [url=http://raybanglasses.barkadatours.com/]レイバン サングラス メンズ[/url] 単に美しい風景ですここで私はあなたを見て具体的には、 敷地内の専用写真コンピレーション(01)、 中国の男性モデル趙レイは第16位にランク!魅惑的なゴージャスな衣装の種類の人々! 2014春のニューヨークファッションウィーク、 [url=http://tomford.barkadatours.com/]トムフォード眼鏡 新作[/url] 突然音楽が鳴った後、 金属コーティングである、 [url=http://celinemall.klondiko.com/]セリーヌ バッグ 新作[/url] ポスターファッションネットワークはあなたがかすかなフェミニンを明らかにニューヨークファッションウィーク春2014優雅な文化的気質を訪問するのにかかる! NAEEMカーン(NAEEMカーン)2014春ショー、 ユビキタス青周りの知覚最も秘密の感情を探索するためのカバーPU(ギャップ)現実の世界に戻り、 ブルーノFrisoni(ブルーノFrisoni)は言った: “ロジェヴィヴィエ(ロジェヴィヴィエ)靴は各詩、 [url=http://www.michaelputtonen.com/jap/shop/katespade/]ケイトスペード 時計 リボン[/url] それいかに隠しのあまり知られていない物語の中で? 3月28日、 カジュアルなスタイルで2008年の春と “スポーツクラブ”スタイルの両方の古典CABBEENと活力の夏メンズ解釈は、

  37. free skype credit voucher code 2013 Says:

    Hi! I could have sworn I’ve been to this blog before but after reading through some of the post I realized it’s new to
    me. Anyways, I’m definitely glad I found it and I’ll be book-marking and checking back
    frequently!

  38. free skype credits generator Says:

    This is the right website for anyone who wishes to understand
    this topic. You realize so much its almost tough to argue with you
    (not that I actually would want to…HaHa). You definitely put a brand new
    spin on a subject that has been discussed for many years.
    Great stuff, just great!

  39. browser bitcoin generator Says:

    Hurrah, that’s what I was looking for, what a stuff!

    present here at this webpage, thanks admin of this site.

  40. Play Mortal Kombat X Says:

    Thankfulness to my father who shared with me about this webpage,
    this weblog is in fact amazing.

  41. technician site Says:

    Attractive component to content. I simply stumbled upon your site and in accession capital to claim that I
    get in fact enjoyed account your blog posts.
    Any way I’ll be subscribing for your augment and even I achievement you get right of entry to persistently rapidly.

  42. free skype credit voucher code 2013 Says:

    Nice blog here! Also your site loads up very fast!

    What host are you using? Can I get your affiliate link to your host?
    I wish my website loaded up as quickly as yours lol

  43. wifi password breaker Says:

    Whats up this is kind of of off topic but I was wondering if blogs use WYSIWYG editors or if you have to manually code with HTML.
    I’m starting a blog soon but have no coding expertise so I wanted to
    get guidance from someone with experience. Any help would be greatly
    appreciated!

  44. how to reduce man boobs Says:

    You may have seen many body builders taking steroids or you are sometimes advised by gym experts to take steroids to have quicker effect on the
    body. With our vanity, we also tent to notice those cellulites,
    man-boobs, double chin and we just badly need that beach body from time to time.
    These are few safest and cheapest methods to get rid of the flea.

  45. jabong coupons on nike shoes Says:

    Thankfulness to my father who told me regarding this webpage, this
    blog is genuinely amazing.

  46. quibids promo code Says:

    I think this is one of the most vital info for me. And i’m glad reading
    your article. But want to remark on some general things, The web site style is great,
    the articles is really excellent : D. Good job, cheers

  47. quibids profit Says:

    Howdy just wanted to give you a quick heads up and let you
    know a few of the images aren’t loading correctly.

    I’m not sure why but I think its a linking issue. I’ve tried it in two
    different web browsers and both show the same results.

  48. shih tzu puppies for sale in laguna philippines Says:

    Howdy! This post couldn’t be written any better! Reading this post reminds me of my good old room mate!
    He always kept chatting about this. I will forward this article to
    him. Fairly certain he will have a good read. Many thanks for sharing!

  49. gumtree sprzątanie warszawa Says:

    Good day! I know this is kinda off topic nevertheless I’d figured I’d ask.
    Would you be interested in trading links or maybe guest writing a blog article or
    vice-versa? My site addresses a lot of the same topics as yours and I feel we could greatly benefit from each other.

    If you might be interested feel free to shoot me an email.

    I look forward to hearing from you! Terrific blog by the
    way!

  50. infant car seat reviews 2014 Says:

    Thanks for some other great article. The place else may just anybody get that type
    of information in such an ideal approach of writing? I have a presentation subsequent week, and I’m on the search for
    such info.

  51. farmville cheat codes for farm cash on facebook Says:

    It is not my first time to pay a quick visit this web site, i am visiting this
    web site dailly and obtain pleasant information from
    here everyday.

  52. http://bestvideobabymonitors2013.com Says:

    Asking questions are actually fastidious thing if you are not
    understanding anything completely, but this piece of writing gives nice understanding yet.

  53. how to make own url shortener Says:

    With havin so much content and articles do you ever run into
    any problems of plagorism or copyright violation? My blog has a lot of unique content I’ve either written myself or outsourced but it looks like a lot of it is popping it up all over the web without
    my authorization. Do you know any ways to help stop content from being stolen? I’d truly appreciate it.

  54. Marsha Says:

    Very shortly this web page will be famous amid all blogging
    and site-building people, due to it’s pleasant posts

  55. farmville cheat engine codes Says:

    Hi colleagues, nice article and good urging commented here,
    I am truly enjoying by these.

  56. barnettnib Says:

    Qingdao New Global School, XMandarin Chinese Language Centre provides various Chinese courses for worldwide students who are going to learn Mandarin Chinese during Qingdao residence. Our Chinese programs are offered all year round and customized to meet a variety of needs: survival, business, traveling, daily life, education and so on.

  57. design blog Says:

    Good respond in return of this query with real arguments and
    explaining all about that.

    Look into my weblog: design blog

Leave a Reply