Reaver
Brute-force WPS PINs to recover WPA keys.
KaliParrothigh
pkg: reaver
Reaver attacks the WPS PIN to recover the WPA/WPA2 passphrase on routers with WPS enabled.
Syntax
reaver -i {mon-iface} -b {bssid} -vv
Example
reaver -i wlan0mon -b AA:BB:CC:DD:EE:FF -vv
Brute-forces the WPS PIN of the AP, eventually revealing the WPA key if WPS is vulnerable.
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
reaver
Usage examples
reaver -i wlan0mon -b AA:BB:CC:DD:EE:FF -vv
Brute-force the WPS PIN.
reaver -i wlan0mon -b AA:BB:CC:DD:EE:FF -K
Try the fast Pixie-Dust attack.
Advantages
- Bypasses strong WPA passphrases via WPS
- Effective on unpatched routers
- Recovers the plaintext key
Disadvantages
- Slow; modern routers lock/rate-limit WPS
- Only works if WPS is enabled
- Noisy and disruptive
Tags
#wifi#wps
Official docs: Reaver ↗
Related commands
Frequently asked questions
What is Reaver used for?
Reaver attacks the WPS PIN to recover the WPA/WPA2 passphrase on routers with WPS enabled.
What is an example Reaver command?
A common example is: reaver -i wlan0mon -b AA:BB:CC:DD:EE:FF -vv — Brute-forces the WPS PIN of the AP, eventually revealing the WPA key if WPS is vulnerable.
Is Reaver part of Kali Linux?
Yes. Reaver ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install reaver.
What category of security tool is Reaver?
Reaver is a Wireless Attacks tool with a high-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.