EAPOL timeouts about reaver-wps-fork-t6x

[soxrok2212]

Remove -A from your command. -A tells Reaver not to associate (sometimes it's required to do this manually, then you would need -A) but most of the time you'll be fine without -A

[Dreadmonkey]

Thanks very much for the fast response :)

I should have been clearer however, with the intel card i had to use wash to perform the association otherwise reaver just hung waiting for a beacon. With the Alfa card I can associate but still get the EAPOL timeouts

[soxrok2212]

Wash does not associate with anything, it just looks in beacon frames to see if WPS is enabled or not. Try without -A and it should work. Internal cards in general are not the best for this purpose, not to mention it's Intel which has terrible support for injection on it's newer cards.

[soxrok2212]

Reaver will also say it's associated with the AP when you use -A because it's expecting you to manually associate, but in reality it's not associated.

[Dreadmonkey]

Yeah that's why I bought the Alfa card.

Just running it now without the -A and reaver won't associate, output below with the mac address removed;

root@Kali:~# reaver -i wlan2mon -b 00:21:29:DE:94:8A -vv -K 1

Reaver v1.5.2 WiFi Protected Setup Attack Tool
Copyright (c) 2011, Tactical Network Solutions, Craig Heffner [email protected]
mod by t6_x [email protected] & DataHead & Soxrok2212

[+] Waiting for beacon from xx:xx:xx:xx:xx:xx
[+] Switching wlan2mon to channel 1
[+] Switching wlan2mon to channel 11
[+] Switching wlan2mon to channel 2
[+] Switching wlan2mon to channel 11
[+] Switching wlan2mon to channel 3
[+] Switching wlan2mon to channel 11
[!] WARNING: Failed to associate with xx:xx:xx:xx:xx:xx

[soxrok2212]

What is the make and model of the target AP? It would be that WPS is not configured but it is enabled. Does it happen on all targets?

[Dreadmonkey]

I've tried across multiple AP's, the latest one is an old Linksys WAP4400, previous ones i can't remember off the top of my head as I was testing at a friends. WPS is enabled

[soxrok2212]

Did it work on other targets?

[Dreadmonkey]

Nope, same results with EAPOL timeouts

[soxrok2212]

Try an injection test with aireplay
aireplay-ng wlan2mon -9

[Dreadmonkey]

Yep I get an injection is working message according to aireplay

[soxrok2212]

Have you completely updated your Kali install after installation?

[Dreadmonkey]

I had so now just done a clean install. Still reaver won't associate without running airodump-ng in another terminal, just switches the the right channel but never gets the beacon. Different behavior once associated though in that it hangs immediately after the line: Starting Cracking Session. Pin count... etc

Edit: I lied after restart same behavior, EAPOL timeouts

[soxrok2212]

Try again with -A and fakeauth with aireplay-ng http://www.aircrack-ng.org/doku.php?id=fake_authentication

[Dreadmonkey]

Sorry for the slow response, I'll try the -A and fakeauth when I get home. However I have manged to get results. It seems reaver will run successfully if I don't run airodump-ng beforehand to get a MAC. I noticed this late last night after a reboot when I already had the reaver attack saved it ran. Afterwards when I wanted the MAC of my other AP and ran airodump-ng to get it and afterwards reaver was failing and injections tests failed.

I'll let you know if I observe anything else but thank you for all your help, you guys are great.

[kcdtv]

Sorry to interrupt 😺
Correct me if i am wrong but this is how you use airodump-ng
airodump-ng wlan0mon
No filter, nothing... this is not a bug and you can use airodump-ng with reaver BUT you need to use at least the channel filter (betteer if you use bssid filter too)... like this
airodump-ng --bssid <mac_adress_AP> --channel (X)X <interface>
Otherwise your interface is doing channel hoping and you cannot properly attack with reaver (or bully)
WPS transaction is short and fast so you really need your wireless device to be focus on the target...
cheers 🐈

[Hunter5711]

can anyone help me out ? I have tried all the wifi hacking tools of kali but sadly None of them worked for me.Can anyone tell me that is Hacking Wi-Fi is really possible coz I'm just fed up with these...plzz help

[soxrok2212]

This repository is not for “hacking” support.