How to use the wash command to find WPS enabled routers with Backtrack 5 or Kali Linux

By | May 13, 2013

The “wash” command has been notorious for having problems and not working correctly. Basically the “wash” command goes out and tells you if a router has WPS on it so you don’t wast your time running reaver. I believe I have found a fix that has been working for me on both Backtrack 5 and Kali Linux.
Be sure your wireless USB adapter is in monitor mode
“airmon-ng start wlan0”
Then make a directory like this.
“mkdir /etc/reaver”
Next run the wash command
“wash -i mon0 -C”
Be sure to use a capitol “C” and of course run the above commands without the brackets ” “.
I made a quick video for it here.

14 thoughts on “How to use the wash command to find WPS enabled routers with Backtrack 5 or Kali Linux

  1. Freyja

    When I do airodump-ng wlan0 I see my router
    when I use wash -i wlan0 I see other routers but not mine

    any idea?

  2. Robin

    when i run wash -i wlan0, it shows this

    [X] ERROR: pcap_activate status -1
    [X] PCAP: generic error code
    couldn’t get pcap handle, exiting

    how can i solve this?

  3. Alessio

    When you have issues with the monitoring interface just run airmon-Ng wlan0
    And use the monitoring interface created by this daemon. I case of Kali it generally is wlan0mon

    Wash -I wlan0mon

  4. mohamed arshad

    i have two routers with wps enabled as wps pin security thats tp-link routers , on mobile it shows wps enabled and can be cracked in android “wpa wps tester” in seconds but i am confused that it doesn’t shows wps enabled in this wash command or wifite or fern or anything in my kali any fix is appreciated..

  5. Gunner

    When i use “wash -i mon0”
    [!] Found packet with bad FCS, skipping…
    [!] Found packet with bad FCS, skipping…

    Else, “wash -i mon0 -C”
    Nothing appears except the headers of bssid….

    I am using Alfa AWUS036NH in Kali Linux.. Didnot install any driver as it was auto detected.
    #uname -a
    Linux G33k 3.14-kali1-amd64 #1 SMP Debian 3.14.4-1kali1 (2014-05-14) x86_64 GNU/Linux

    1. admin

      Nothing will show up with the WASH command if there is no WPS enabled routers in range.

      1. Dom


        I’m facing the same issue as gunner, and I know for a fact that there are several WPS enabled routers nearby. Yet, WASH doesn’t show them. Is there any way to fix this?

  6. Barry

    @elkhorn: Did you solve this problem? I also had this problem when I forgot to use CTRL+C to free the USB adapter.

  7. elkhorn

    I’m probably doing something stupid, but I can’t get the wash command to work. First of all, I’ve been able to find my WPA2 Pin & Passphrase using Reaver v1.4 (running BT5R3 Gnome VM-32 under VMWare player 6.01, running on fully patched Win8 – 64 {ugh-ugh-ugh}). A bit slow, but it runs OK.

    When I try to run wash, it fails with the following:

    Wash v1.4 WiFi Protected Setup Scan Tool
    Copyright (c) 2011, Tactical Network Solutions, Craig Heffner

    [X] ERROR: Failed to open ‘-mon0’ for capturing

    wlan0 & mon0 are up (and seemingly running) on an Alfa AWUS036NHR USB adapter.

    Do I have to back down to the Alfa AWUS036NH USB adapter to get wash to work?

    Or is there an update to the command that I haven’t located?

    computer: HP h8-1414, AMD FX-6120 6-core 3.5GHz processor, 10GB DDR3-1600, Gigabyte M3970AM-HP mobo. Up-to-date Win8 64-bit OS.

    1. fundamentalOfHate

      I had this problem and so i ran it as sudo and it worked for me. I was not running as root before..

  8. some one

    when i use the command wash -i mon0 the network don’t show in the list
    the network security type is wpa/wpa2
    encryption type aes/tkip
    pls help

    how i can get to show up
    fyi i know the mac address num. of the network , i used the command
    reaver -i mon0 -b [macnum] -vv but i keep geting the msg
    faild to assosite the the [macnum] [bssid]


  9. Del


    Please teach or link how to hack using bt5 I have 36nh Alfa


Leave a Reply

Your email address will not be published. Required fields are marked *