If a WPS brute-force attack using Reaver is thwarted by a lockout mechanism, which method improves success odds?

• A. Increase the number of Reaver attempts immediately
• B. Switch to offline attack using the Pixie Dust method to exploit RNG weaknesses.
• C. Disable the AP
• D. Use WPS PIN brute-force for longer time.

Answer: (B)

The situation tests how to bypass online rate limits that stop repeated WPS brute-forcing. When a Reaver-based attack is thwarted by a lockout, the most effective path is to switch to an offline attack that exploits weaknesses in WPS so you don’t trigger that lockout.

Pixie Dust takes advantage of specific flaws in the WPS protocol’s random number/verification process. By capturing the right data during normal WPS interactions, you can compute the WPS PIN offline, without hammering the AP with live guesses. Once you have the PIN, you can derive the WPA/WPA2 passphrase, achieving the goal without facing the online lockout.

The other options keep trying online guesses or involve messing with the network itself, which either triggers the lockout more, is ineffective over time, or simply isn’t a viable path to the WPA key.