Skip to content
Get packs

Offensive WPS Attack Methodology

Guides an agent through WPS PIN attacks (Pixie Dust, online brute-force) against Wi-Fi routers.

Source Download skill
Repository
SnailSploit/Claude-Red
Stars
10,230
Licence
MIT
Files
1 file

What it does

This skill gives an AI agent a detailed playbook for attacking the WPS (Wi-Fi Protected Setup) feature on wireless routers. WPS is a convenience feature that lets devices join a Wi-Fi network using a short PIN or button press. The skill explains how to detect WPS-enabled access points, run the offline Pixie Dust attack against vulnerable chipsets, fall back to online PIN guessing with tools like reaver and bully, handle lockouts, and derive the Wi-Fi password from a recovered PIN. It is written as an offensive security methodology, so the agent will tailor its guidance toward breaking into networks rather than protecting them.

Great for

  • Penetration testers with written authorization to assess a Wi-Fi network
  • Security students practising wireless assessment in a lab they own
  • Red teams evaluating consumer router exposure during an approved engagement

Skip it if

  • Accessing any Wi-Fi network you do not own or have explicit written permission to test, which is illegal in most jurisdictions
  • Home users wanting to recover their own forgotten password, since simpler and safer options exist such as the router admin page
  • Defenders looking for hardening steps; the file focuses on attack technique and does not cover mitigation (disabling WPS) in depth

Try asking

  • “Scan my authorized lab network for WPS-enabled access points and tell me which chipsets look vulnerable to Pixie Dust”
  • “Walk me through a Pixie Dust attack with reaver against the test router at BSSID AA:BB:CC:DD:EE:FF”
  • “Plan an online WPS PIN brute-force engagement with lockout handling and a time estimate”
  • “Write a short client report on WPS risks for a router we assessed under contract”
Step-by-step guide: how to use Offensive WPS Attack MethodologyInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    offensive-wps.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip offensive-wps.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip offensive-wps.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only use it against networks you are authorized to test, and record that authorization before starting; the agent cannot verify permission itself.
  • Ask the agent for defensive output too, such as recommending disabling WPS and changing lockout settings, to make reports more useful to clients.
  • Give the agent specific details (chipset, router model, firmware) so it can prioritise Pixie Dust versus PIN-default candidates rather than brute force.

What's inside

  • SKILL.md

Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.