Fuente original: corelabs.coresecurity.com

What is WPSIG?

It’s a simple tool (written in Python) that does information gathering using WPS information elements. WPS or Wi-Fi Protected Setup is a standard created by the Wi-Fi Alliance that allows the users to setup the security of a Wireless AP in a simple way. Wireless APs supporting WPS discloses enough information to fully fingerprint it using only 1 probe request frame. The following information can be obtained using this method:

• Device Name
• Model Number and Name
• Manufacturer
• Serial Number of the device

Requirements

• Python installed.
• PyLorcon2 library installed.
• Impacket library installed.
• Pcapy library installed.

Source Code

Source is available here.

Usage

Using WPSIG is straightforward,

Wi-Fi Protected Setup Information Gathering. Usage: WPSIG.py -i interface -w filename Options: -h, --help show this help message and exit -i IFACE, --interface=IFACE network interface where to sniff. -w FILENAME, --write=FILENAME output filename. -s SOURCE, --source=SOURCE source mac address of the probe request frames.

e.g. WPSIG on interface wlan0,

root@unknow:~# ./wpsig.py --interface wlan0 Wi-Fi Protected Setup Information Gathering. Press Ctrl+C to stop. Sniffing... -------------------------------------------------------------------------------- [00:22:6B:55:99:88] - 'xxxxxx' - 'Cisco-Linksys, LLC' WPS Information * Device Name: 'Wireless-G Router' * Wi-Fi Protected Setup State: 'Not Configured' * UUID-E: 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' * Response Type: 'AP' * Primary Device Type: 'Network Infrastructure - AP' * Model Number: 'WRT54G2' * Serial Number: 'CSV01Hxxxxxxx' * Version: '1.0' * Model Name: 'Router' * Config Methods: 'Display, PushButton' * Manufacturer: 'Linksys' -------------------------------------------------------------------------------- ^C Ctrl+C caught. Closing... root@unknow:~#

Licensing

WPSIG is released under version 3 of the GNU General Public License.

Description

Title

WPSIG

Release date

2010-06-18

License type

GPLv3