| Author |
Message |
Gpudaniels
Status: n/a
Joined: Sat, 23 Sep 2017
Posts: 89
Team:
Reputation: 270
Offline
|
Mon, 09 Oct 2017 @ 22:35:00
Hello! I require .cap/.hccapx handshakes for "SHAW-XXXXXX" routers (which I believe to be native to North America). If any users have managed to capture handshakes of this kind, please link them in a comment, as I believe there may be a pattern to how the passkey's are generated! I will be posting my found lists after I am reassured that I am on to something 
BTC 17zbKJatjygd1YJ9shMbEhcpPiV8eYDvkT
ETH 0x1f1F523BA849c2303c3f7262794bE91EA675D241
|
|
|
Felis-Sapiens
Status: Member
Joined: Thu, 07 Jul 2016
Posts: 164
Team:
Reputation: 361
Online
|
Tue, 10 Oct 2017 @ 07:09:56
Code: 84:94:8C:CC:52:F8 SHAW-CC52F0 25114B042065
BC:4D:FB:18:F5:48 SHAW-18F540 25114C028152
84:94:8C:D3:D5:E8 SHAW-D3D5E0 251151005816
SHAW-E776A0_RE 251155066794
00:FC:8D:A4:F5:08 SHAW-A4F500 251159036655
00:FC:8D:CE:50:C8 SHAW-CE50C0 25115A064480
SHAW-3FAA40 25115C002265
A8:4E:3F:59:8D:78 SHAW-598D70 2511680A5780
F0:F2:49:E1:63:78 SHAW-E16370 251163023383
00:71:C2:B0:4A:58 SHAW-EA3A01 274848067
C0:7C:D1:8B:62:88 SHAW-669DC9 277687213
C0:7C:D1:BD:33:98 SHAW-68B804 277900771
|
|
|
Gpudaniels
Status: n/a
Joined: Sat, 23 Sep 2017
Posts: 89
Team:
Reputation: 270
Offline
|
Tue, 10 Oct 2017 @ 15:24:03
Felis-Sapiens said: Code: 84:94:8C:CC:52:F8 SHAW-CC52F0 25114B042065
BC:4D:FB:18:F5:48 SHAW-18F540 25114C028152
84:94:8C:D3:D5:E8 SHAW-D3D5E0 251151005816
SHAW-E776A0_RE 251155066794
00:FC:8D:A4:F5:08 SHAW-A4F500 251159036655
00:FC:8D:CE:50:C8 SHAW-CE50C0 25115A064480
SHAW-3FAA40 25115C002265
A8:4E:3F:59:8D:78 SHAW-598D70 2511680A5780
F0:F2:49:E1:63:78 SHAW-E16370 251163023383
00:71:C2:B0:4A:58 SHAW-EA3A01 274848067
C0:7C:D1:8B:62:88 SHAW-669DC9 277687213
C0:7C:D1:BD:33:98 SHAW-68B804 277900771
Nice find! There is definitely a correlation between the SSID, and the passkey
BTC 17zbKJatjygd1YJ9shMbEhcpPiV8eYDvkT
ETH 0x1f1F523BA849c2303c3f7262794bE91EA675D241
|
|
|
hamade
Status: n/a
Joined: Wed, 01 Nov 2017
Posts: 1
Team:
Reputation: 0
Offline
|
Wed, 01 Nov 2017 @ 13:14:02
ihave to crack pasword
|
|
|
undersc0re
Status: n/a
Joined: Sat, 15 Apr 2017
Posts: 8
Team:
Reputation: 3
Offline
|
Thu, 09 Nov 2017 @ 03:38:10
There is patterns to shaws routers, if the password is factory then they are all crackable, I think that there is an arris type router that may not be. Those hitron routers that all start with 2511 are very easy and have a mix of numbers with also an uppercase letter which can be in one of 2 spots only and a zero is always in one location, the brand that start with 277 and some older ones that start with 24 and 26 and maybe 27 all being 9 numerals in the password are pretty quick to crack as well especially if you are using a gpu. Pretty easy to see the pattern up in the other post and the ssid will pretty much tell you which type of password to work on.
Not a huge security risk at that point, but when you realize that you can access the router settings with username cusadmin and password same as wifi pass that is a huge security risk if someone knew what to do in there.
Gpudaniels put together a great post in another thread about this in the default router wpa keys - keyspace used thread!
|
|
|
payknight
Status: Cracker
Joined: Wed, 13 Apr 2016
Posts: 677
Team: just4fun
Reputation: 372
Online
|
Wed, 22 Aug 2018 @ 15:33:29
Gpudaniels said: Felis-Sapiens said: Code: 84:94:8C:CC:52:F8 SHAW-CC52F0 25114B042065
BC:4D:FB:18:F5:48 SHAW-18F540 25114C028152
84:94:8C:D3:D5:E8 SHAW-D3D5E0 251151005816
SHAW-E776A0_RE 251155066794
00:FC:8D:A4:F5:08 SHAW-A4F500 251159036655
00:FC:8D:CE:50:C8 SHAW-CE50C0 25115A064480
SHAW-3FAA40 25115C002265
A8:4E:3F:59:8D:78 SHAW-598D70 2511680A5780
F0:F2:49:E1:63:78 SHAW-E16370 251163023383
00:71:C2:B0:4A:58 SHAW-EA3A01 274848067
C0:7C:D1:8B:62:88 SHAW-669DC9 277687213
C0:7C:D1:BD:33:98 SHAW-68B804 277900771
Nice find! There is definitely a correlation between the SSID, and the passkey where do u see the correlation between the ssid and the passkey ?
+rep if i helped
BTC : 1PAyKniGHt7yyCb8HdsziTHBEFX6zkGSHz
|
|
|
Gpudaniels
Status: n/a
Joined: Sat, 23 Sep 2017
Posts: 89
Team:
Reputation: 270
Offline
|
Sun, 02 Sep 2018 @ 03:14:16
payknight said: Gpudaniels said: Felis-Sapiens said: Code: 84:94:8C:CC:52:F8 SHAW-CC52F0 25114B042065
BC:4D:FB:18:F5:48 SHAW-18F540 25114C028152
84:94:8C:D3:D5:E8 SHAW-D3D5E0 251151005816
SHAW-E776A0_RE 251155066794
00:FC:8D:A4:F5:08 SHAW-A4F500 251159036655
00:FC:8D:CE:50:C8 SHAW-CE50C0 25115A064480
SHAW-3FAA40 25115C002265
A8:4E:3F:59:8D:78 SHAW-598D70 2511680A5780
F0:F2:49:E1:63:78 SHAW-E16370 251163023383
00:71:C2:B0:4A:58 SHAW-EA3A01 274848067
C0:7C:D1:8B:62:88 SHAW-669DC9 277687213
C0:7C:D1:BD:33:98 SHAW-68B804 277900771
Nice find! There is definitely a correlation between the SSID, and the passkey where do u see the correlation between the ssid and the passkey ?
send me the BSSID you are wishing to know the passkey to, and I will estimate within a margin of error
BTC 17zbKJatjygd1YJ9shMbEhcpPiV8eYDvkT
ETH 0x1f1F523BA849c2303c3f7262794bE91EA675D241
|
|
|
wpginterceptor2
Status: n/a
Joined: Sun, 02 Sep 2018
Posts: 4
Team:
Reputation: 0
Offline
|
Sun, 02 Sep 2018 @ 18:37:20
SHAW-69D590 and SHAW-BFC559
|
|
|
wpginterceptor2
Status: n/a
Joined: Sun, 02 Sep 2018
Posts: 4
Team:
Reputation: 0
Offline
|
Sun, 02 Sep 2018 @ 18:38:52
SHAW-65D590 90:50:CA:69:D5:9B
http://www.mediafire.com/file/5f558swkkp60q6k/SHAW-69D590.cap/file
|
|
|
wpginterceptor2
Status: n/a
Joined: Sun, 02 Sep 2018
Posts: 4
Team:
Reputation: 0
Offline
|
Sun, 02 Sep 2018 @ 19:09:46
SHAW-BFC559 6C:CA:08:A4:CA:D0 SHAW-3013AA 74:85:2A:34:98:C8
|
|
|
Gpudaniels
Status: n/a
Joined: Sat, 23 Sep 2017
Posts: 89
Team:
Reputation: 270
Offline
|
Sun, 02 Sep 2018 @ 23:26:49
wpginterceptor2 said: SHAW-69D590 and SHAW-BFC559
Many Hitron routers with BSSID beginning in "6" have the keyspace "2511690xxxxx"
From my experience with PEGATRON routers, ones beginning in "B", usually have the keyspace "271xxxxxx"
BTC 17zbKJatjygd1YJ9shMbEhcpPiV8eYDvkT
ETH 0x1f1F523BA849c2303c3f7262794bE91EA675D241
|
|
|
Gpudaniels
Status: n/a
Joined: Sat, 23 Sep 2017
Posts: 89
Team:
Reputation: 270
Offline
|
Sun, 02 Sep 2018 @ 23:30:10
wpginterceptor2 said: SHAW-BFC559 6C:CA:08:A4:CA:D0 SHAW-3013AA 74:85:2A:34:98:C8
I do not have an extensive list of ARRIS type routers.
74:85:2A:34:98:C8 is a PEGATRON model, I believe it is "276yxxxxx", inwhich y= 6,7, or 8, and x= 0-9
BTC 17zbKJatjygd1YJ9shMbEhcpPiV8eYDvkT
ETH 0x1f1F523BA849c2303c3f7262794bE91EA675D241
|
|
|
Gpudaniels
Status: n/a
Joined: Sat, 23 Sep 2017
Posts: 89
Team:
Reputation: 270
Offline
|
Sun, 02 Sep 2018 @ 23:31:40
wpginterceptor2 said: SHAW-65D590 90:50:CA:69:D5:9B
http://www.mediafire.com/file/5f558swkkp60q6k/SHAW-69D590.cap/file
I cannot attempt to crack this hash at this moment, and my lists are not consistent for this type of MAC address.
BTC 17zbKJatjygd1YJ9shMbEhcpPiV8eYDvkT
ETH 0x1f1F523BA849c2303c3f7262794bE91EA675D241
|
|
|
wpginterceptor2
Status: n/a
Joined: Sun, 02 Sep 2018
Posts: 4
Team:
Reputation: 0
Offline
|
Mon, 03 Sep 2018 @ 06:25:32
Shaw-9EFCCD CC:65:AD:08:CF:37
|
|
|
undersc0re
Status: n/a
Joined: Sat, 15 Apr 2017
Posts: 8
Team:
Reputation: 3
Offline
|
Mon, 29 Oct 2018 @ 23:32:31
These lists should find the pass of almost all shaw router factory passwords. [url]https://www.anonfiles.cc/file/44fcf5f5dea48704bdfb9c4339207071[url]
|
|
|