WiththiswpsappyoucancheckthesecurityofWi-FinetworksbytestingtheWPSprotocolandtestitwithwpsconnectfunction.
WhatistheWPSprotocol?
TheWPSprotocolisasimplewaytoestablishaconnectionbetweenadeviceandarouterbyexchangingaPIN.
InsteadofhavingtoknowtheWEP,WPAorWPA2keythatcanbelongandcomplicated,withtheWPSprotocolwewillonlyhavetosendtherouteraPIN,whichisanumericalcodewithonly8digits.
WhentherouterreceivesthatPIN,ifitiscorrect,itsendsthedeviceallthedataitneedstoconnecttothenetworkandbymagicandwithouttheneedtoknowthekeyoftheWIFInetwork,thedevicewillconnect.
Easytruth?
Wellyes,veryeasy,toomuch,somuchthatitisahugesecurityholebecauseitisnotthesametohavetodecipheraWIFIkeythanan8-digitcode.
Doesthisapplicationdecryptthatcode?
Theanswerisno.AlthoughitwouldtakemuchlesstimetodeciphertheWEP,WPAorWPA2keyofthenetwork,therealityisthatmostroutershaveasecuritylayerthatpreventsyou,forexample,frommakingmorethanonerequestevery30seconds,orthatonlyItallowsyou3triesinaminuteandthenyouhavetowait10minutesormoretotryagain.Sohowwouldyouguessitwouldtakealot.
Sohowdoestheapplicationwork?
Veryeasy.Alargepercentageofrouters,althoughnotall,havetheWPSprotocolactivatedbydefaultandthatlargepercentage,anotherlargepercentagehasthedefault8-digitPINcodethattheyputinthefactory.OvertimeithasbeendiscoveredthatmanyroutersusespecificalgorithmstogeneratethatPINcodeaccordingtothemodelandmanufactureroftherouterandithasalsobeendiscoveredthatthosethatdonotusealgorithms,manyusethesamefactoryPINcodealsodependingonthemodelandthemaker.
ThereforeweknowthatcertainbrandsandcertainmodelsofroutersusealgorithmsandwealsoknowthedefaultPINcodesofmanyothersthatdonotusealgorithms.AllthatinformationiswhatthisapplicationusestocheckifanetworkwiththeactivatedWPSprotocolisvulnerabletothisattack.
SocanIconnecttoanyWIFInetworkwiththiswpsapp?
No,it'snotthatsimple.Althoughallthesedataofroutermodelsandmanufacturersareknown,overtimetheyrealizedthisbigproblemandinthenewmodelstheyhavealreadytriedtosolveit,forexamplebydeactivatingtheWPSprotocol.
TherearealsopeoplewhoareawareofthesedangersandtheythemselvesarethosewhodeactivatetheprotocolorchangethegenericPINcodefortheirown,sothissystemwouldnolongerwork.
TherealityisthattodaytherearemanyrouterswiththeWPSprotocolenabledandthedefaultPIN,buttheyarenotall,ifyouusethisapplicationagainstanetworkwiththeWPSprotocolactivatedanditdoesnotwork,itisnotthattheapplicationdoesnotwork,isthattherouterwillhavethemodifieddefaultPINorthatitisamodernrouterwithmoresecuritymeasurestoavoidthisattack.
CanIseetheWIFIkeyofanetworktowhichIhaveconnectedwiththiswpsapptoshareitwithafriend?
Nobut....TheAndroidsystemdoesnotallowtoseetheWIFIkeysunlessyouarearootuserandyouknowwheretolookorusespecificapplicationsforit.Thisapplicationisnotdesignedforrootusers,isdesignedforeveryoneanddoesnothavethatfunctionality.However,ifyouhaveconnectedtoavulnerablenetworkandwantafriendofyourstoalsoconnect,yourfriendonlyhastodownloadthisapplication,youwillhavetoaccessthesavednetworksmenuofyourapplicationandgenerateaQRcode,yourFriendscanthatcodewiththisapplicationandyoucanconnecttothenetwork.
Rememberthatyoucanonlyusethisapplicationinyournetworksorinwhichyouhavepermissionfromitsowner.