Want to check the security of your network? At one time you may have needed to install a desktop operating system with a specific wireless network card. But now you can use certain Android devices to scan and crack wireless networks. These tools are available free of charge if your device is compatible. Hacking routers without permission is illegal. These steps are provided to test the security of your own network!

So let's see what the necessary steps are:

  1. Root a compatible device. Not every Android phone or tablet will be able to crack a WPS PIN. The device must have a Broadcom bcm4329 or bcm4330 wireless chipset and must be root-assigned. The Cyanogen ROM will give you the best chance of success. Some of the known supported devices are:
    • Nexus 7
    • Galaxy Ace / S1 / S2 / S3
    • Nexus One
    • Desire HD
  2. Download and install bcmon. This tool enables Monitor Mode on the Broadcom chipset, which is necessary to be able to break the PIN. The bcmon APK file is available for free from the bcmon page on the Google Code website.
    • To install an APK file, you must allow installation from unknown sources in your Security menu.
  3. Run bcmon. After you install the APK file, run the application. If prompted, install the firmware and tools. Press the "Enable Monitor Mode" option. If the application crashes, open it and try again. If it fails a third time, it is very likely that your device is not supported.
    • Your device must be rooted to run bcmon.
  4. Download and install Reaver. Reaver is a program developed to break the WPS PIN so that the WPA2 passphrase can be recovered (passphrase). The Reaver APK can be downloaded from the developer thread on the XDA-developers forums.
  5. Start the Reaver. Tap the Reaver icon on Android from the Reaver app. app drawer. After confirming that you are not using it for illegal purposes, Reaver will scan for available access points. Select the access point you want to break to continue.
    • You may need to confirm Monitor Mode before proceeding. In this case, bcmon will open again.
    • The access point you select must accept WPS authentication. Not all routers support this.
  6. Confirm your settings. In most cases, you can leave the default settings. Make sure the "Automatic advanced settings" checkbox is checked.
  7. Start the cracking process. Press the "Start attack" button at the bottom of the Reaver Settings menu. The screen will open and you will see the results of the ongoing crack displayed.
    • WPS cracking can take from 2 to 10+ hours to complete and is not always successful.