Overview
Wash scans for WPS-enabled APs and reports their WPS version, lock status, and signal strength. Part of thereaver package.
Install
Usage
| Flag | Description |
|---|---|
-i <iface> | Monitor mode interface |
-c <channel> | Lock to channel |
-5 | Use 5 GHz 802.11 channels |
-s | Use scan mode (actively probe APs) |
-O <file> | Write packets of interest to a pcap file |
-n <num> | Max probes to send each AP in scan mode (default 15) |
Basic Scan
Output Columns
| Column | Description |
|---|---|
| BSSID | AP MAC address |
| Ch | Channel |
| dBm | Signal strength |
| WPS | WPS version |
| Lck | Lockout active (Yes/No) |
| Vendor | Chipset vendor |
| ESSID | Network name |
Lck: No. Locked APs enforce rate limiting and will slow or block brute force attempts.