I've been testing out Bully on seve

I've been testing out Bully on several networks. The
only downside I can see is that it doesn't seem to
realise when WPS isn't enabled and just constantly
spams the AP with pin attempts. Although it's pretty
obvious when you see the same pin tried over and
over again, that it isn't gonna work, it would be nice if it would stop itself, LOL Like This thesugarat 10 Jan 2014 Sounds like it doesn't catch on to AP Rate Limiting
like reaver does.... Edited by thesugarat, 10 January 2014 - 05:30
PM. Like This Xcellerator 10 Jan 2014 Yeah, tbh both Bully and Reaver have their pros and
cons. Seeing as bully is maintained more than
reaver (which isn't hard, lets be honest!), hopefully
they'll add some features in a patch.. Like This Guest_spazi_* 10 Jan 2014 I've used Reaver for a long time and it's one of my
main go-to tools for hacking wifi AP's.
I haven't used Bully that much, but it seemed to me
that it was "better" in some ways. I still do use
Reaver a lot though :) I Also recently installed RfA (Reaver for Android) Only works on phones with the BCM4329/4330
chipset. A little buggy, but works alright. Mind you, Bully has just been updated. And I'm
hoping for a Android port! :) Like This 735Tesla 10 Jan 2014 Does bully have a option to set a starting pin? If so
why not utilize both of the wireless interfaces and
start one half way through the total possible number
of combinations and run through them twice as fast. Like This thesugarat 10 Jan 2014 Even if bully doesn't have the option reaver does....
Not sure what would happen to the router.
Interesting idea though. Like This 735Tesla 10 Jan 2014 Unfortunately I couldn't get reaver to run on
OpenWRT. Have you found a way? Also, I just read
the documentation for bully on github and it does
have that option. It would have to be specified with
the sequential option too I guess to avoid repeating
pins. I'll try this at home but I have a feeling my router may not like it. Last time I set reaver's delay
to zero it became unresponsive to all traffic and I
had to reboot. The thing is I am not sure if I would
mess bully up because the whole reason it is so
easy to brute force wps is that the last digit is a
checksum of another one (i forget which) and the remaining seven digits are processed in two parts.
So instead of brute forcing like this: 00000000 00000001 00000002 etc. It would look something like this: 0000000x 0010001x 0020002x or at leas that is what I think based on what I have
read. Please correct me if I am wrong. Last thought: Wouldn't it be cool to have a boot mode that
automatically cracked the WPS ap with the
strongest signal and then associated with it and
started up a rogue ap? That would go great if it was
mounted on a drone. I will have to start playing
around at home. Unfortunately home is the only place I can test such things because I do not have
any willing friends who use WPS, and would never
do anything like this to someone without their
permission. So if anyone else tries this and has
good luck please post back. :) Like This thesugarat 10 Jan 2014 reaver definitely works on the pineapple. It even has
an infusion again thanks to Whistle Master, but it
runs perfectly fine over ssh using the normal
commands. Like This 735Tesla 11 Jan 2014 Really? I'll try a hard reset and then attempt it again.