Identifying WPS-enabled APs using wash
Short answer
A Wash allows Morris to discover WPS-enabled APs and check their locked state.
Question
Morris, an attacker, wanted to check whether the target AP is in a locked state. He attempted using different utilities to identify WPS-enabled APs in the target wireless network. Ultimately, he succeeded with one special command-line utility. Which of the following command-line utilities allowed Morris to discover the WPS-enabled APs?
Key Takeaways
The exam tests knowledge of wireless hacking tools, specifically distinguishing wash from other network utilities used for MAC flooding or network viewing.
This question identifies the command-line utility 'wash' as the correct tool for discovering WPS-enabled access points and checking their locked state. It establishes that wash is the standard answer for this specific CEHv12 scenario.
Common mistake: Candidates often confuse wash with macof (used for MAC flooding) or net view (used for Windows network shares), leading to incorrect selections.
Expert Analysis
Why the Answer Is Correct
The utility 'wash' is a command-line tool designed specifically to scan for Wireless Protected Setup (WPS) enabled access points. It retrieves information about WPS-enabled devices and can determine if an AP is in a locked state due to too many failed PIN attempts. This functionality directly addresses Morris's objective.Why the Other Options Are Wrong
Net view displays shared resources on a Windows network, which is irrelevant to wireless security scanning. Macof is used to flood a switch's CAM table with random MAC addresses, causing denial of service. Ntptrace traces NTP requests to find stratum 0 servers, having no relation to WPS discovery.Community Comment Notes
Community consensus strongly supports 'wash', with users noting it is the definitive tool for identifying WPS states. As one user noted, "The tool, Wash can identify the WPS-enabled APs and detect if the AP is in locked or unlocked state." Another simply confirmed "A. wash" as the correct choice.Exam Strategy
Memorize the primary function of common wireless hacking tools like Reaver, Aircrack-ng, and Wash. Focus on what each tool does uniquely, such as Wash's specific role in WPS pin verification.
Frequently Asked Questions
What is the difference between wash and reaver?
Wash is used to scan and list WPS-enabled APs and check their status. Reaver is used to actually crack the WPS PIN once a target is identified.
Why is macof incorrect for this question?
Macof is a tool for MAC address flooding attacks against switches, not for discovering wireless network configurations or WPS settings.
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded.
From public community threads 3
-
shaody 👍 1 Answered AThe tool, Wash can identify the WPS-enabled APs and detect if the AP is in locked or unlocked state.
-
LordXander 👍 2 Answered ACEHv12 - 2439
-
insaniunt 👍 2 Answered AA. wash
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.