Reaver
Tool that tests Wi-Fi Protected Setup PIN strength on access points to identify WPS misconfigurations in authorized wireless audits.
Technical Architecture & Overview
Reaver is an open-source C program that tests the strength of Wi-Fi Protected Setup (WPS) PINs on access points. The t6x fork adds bug fixes and an offline WPS PIN assessment mode. The original code was created by Craig Heffner at Tactical Network Solutions.
Targeted Technical Use Cases
Validation of whether access points with WPS enabled are vulnerable to PIN-based misconfiguration in a controlled, authorized audit.
Evaluation & Trade-offs
Core Strengths
- +Focused, single-purpose tool for WPS configuration validation.
- +Lightweight C implementation with minimal dependencies.
Trade-Offs & Limitations
- -Only useful against access points with WPS enabled.
- -Many modern routers have lockout or rate-limit protections.
Defensive Security Application
Identify access points that have WPS enabled unnecessarily and verify that WPS has been disabled or rate-limited according to organizational configuration standards.
Frequently Asked Questions
What is Reaver?→
Reaver is an open-source C program that tests the strength of Wi-Fi Protected Setup (WPS) PINs on access points. The t6x fork adds bug fixes and an offline WPS PIN assessment mode. The original code was created by Craig Heffner at Tactical Network Solutions.
What is Reaver used for?→
Validation of whether access points with WPS enabled are vulnerable to PIN-based misconfiguration in a controlled, authorized audit.
What are the strengths of Reaver?→
- +Focused, single-purpose tool for WPS configuration validation.
- +Lightweight C implementation with minimal dependencies.
What are the limitations of Reaver?→
- +Only useful against access points with WPS enabled.
- +Many modern routers have lockout or rate-limit protections.
How is Reaver used defensively?→
Identify access points that have WPS enabled unnecessarily and verify that WPS has been disabled or rate-limited according to organizational configuration standards.