Home - Wireless Cracking - Default Router WPA Keys - Keyspace Used


343 Results - Page 12 of 12 -
1 2 3 4 5 6 7 8 9 10 11 12
Author Message
Avatar
Purpleninja225

Status: n/a
Joined: Thu, 05 Jul 2018
Posts: 94
Team:
Reputation: 182 Reputation
Offline
Wed, 11 Jul 2018 @ 04:07:15

Found that SmartRG routers ship out with default SSID of SmartRG-XXXX and the password is the MAC address of the device (lowercase). [0-9],[a-f]

However, one of the local ISPs to my area change the SSID and password to the following format:

SSID: [last name of customer aka "smith"]
Password: [Customer's phone number] ([0-9] length 10 (9071234567))

Note: this has been a pattern i've observed in all the smartRG routers I have encountered in the last 6 months (15-20 routers) may not be true for all SmartRG routers.


+rep if I helped. GTX 750 Ti & GTX 550
Github: https://github.com/PurpleNinja225/Hash-Cracking Discord: PurpleNinja225 #6785

Tipz Jar:
BTC 321aVnFwQrhZcHoCoPzp1Vh46rUiQmExzp
ETH 0xF5ab8429F6991f0232Dd4A0eB8318a4e172b1282

Avatar
Purpleninja225

Status: n/a
Joined: Thu, 05 Jul 2018
Posts: 94
Team:
Reputation: 182 Reputation
Offline
Wed, 11 Jul 2018 @ 11:53:35

Recompiled the list in the first post as well as added some routers from other forums that have similar posts into a nice and pretty excel sheet. The sheet can be sorted by the different headers to get a better idea of everything. Here it all is as well as the file for offline use. Also, not all the hypelinks copied correctly, you'll just have to manually copy and paste them into a browser to open.

Note: I don't take credit for originally obtaining this info, I just gathered it from a couple places and made it look a little more organized.

Let me know if I missed anything or made a mistake.


SSID Keyspace Length Notes

2WIREXXX [0-9] Len: 10

3MobileWiFi [0-9 a-z] Len: 8

3WebCube#### [0-9a-fA-F] Len: 8 https://routerunlock.com/wp-content/uploads/2014/06/Huawei-B190-LTE-Wireless-Gateway.png

3Wireless-Modem-XXXX [0-9A-F] Len: 8 The first 4 digits are the same as the 4 digits on the SSID http://ask3.three.ie/ROIWebdocs/Changes/Mobile%20Broadband%20Support/Setting%20up%20Mi-Fi/Images/4.JPG

Alice_XXXXXXXX [0-9 a-z] Len: 24

AOLBB-XXXXXX [0-9A-Z] Len: 8

ATT### [0-9] Len: 10

ATTxxxx 0000 [0-9 A-Z] Len: 10

ATTxxxxxxx [a-z symbols] Len: 12

belkin.xxx [2-9a-f] Len: 8

belkin.xxxx [2-9a-f] Len: 8

Belkin.XXXX [0-9A-F] Len: 8

Belkin_XXXXXX [0-9A-F] Len: 8

BELL### [0-9A-F] Len: 8

BELL#### [0-9A-F] Len: 10

BigPondXXXXXX [0-9A-F] Len: 10 http://s22.postimg.org/w7qofyxj5/Big_Pond_XXXXXX_Technicolor_TG587nv3.png

BOLT!SUPER 4G-XXXX [0-9 Last 4 of SSID] Len: 8 4 numbers + Last 4 of SSID

BrightBox-XXXXXX [word-word-word] Len: 8 3 words, with hyphens in-between.

BTHomeHub2-XXXX [2-9a-f] Len: 10

BTHomeHub-XXXX [0-9a-f] Len: 10

BTHub3 [2-9a-f] Len: 10

BTHub4 [2-9a-f] Len: 10

BTHub5 [2-9a-f] Len: 10

BTHub6-XXXX [0-9a-zA-Z] Len: 10 or 12 Examples: http://cdn1.expertreviews.co.uk/sites/expertreviews/files/2016/06/bt_smarthub_rear_ports.jpg?itok=gCga5sn8 http://cdn2.pcadvisor.co.uk/cmsdata/reviews/3643011/bt-smart-hub-review---ports.jpg

CenturyLinkXXXX [0-9a-f] Len:14

Cisco [0-9a-f] Len: 26

Digicom_XXXX [0-9 A-Z] Len: 8

DJAWEB_##### [0-9] Len: 10

Domino-XXXX [0-9A-F] Len: 8 http://imagizer.imageshack.us/a/img855/6808/fs7j.jpg

E583x-xxxx [0-9] Len: 8 http://4.bp.blogspot.com/-KsB8p6EQeMY/UKD9iA8SkLI/AAAAAAAAEcM/v7Bq2kdHu2E/s1600/ssid-huawei-modem-e5830.jpg

E583x-xxxxx [0-9A-F] Len: 8 https://encrypted-tbn1.gstatic.com/images?q=tbn:ANd9GcRZz7DlK9S1yhG4PmZYoJh3j4Os3o9IVj30CZpLzBU0r9pWPTNC

EasyBox 904 LTE [0-9a-zA-Z] Len: 9

EasyBox-###### [0-9A-F] Len: 9 http://www.arcor.de/hilfe/files/img/803s_Typenschild.png

EEBrightBox-XXXXXX [word-word-word] Len: Varies http://forum.md5decrypter.co.uk/topic1660-brightbox.aspx and https://hashkiller.co.uk/dump/brightbox_extended.7z

FRITZ!Box Fon WLAN #### [0-9] Len:16 https://wiki.stipte.nl/images/c/c9/Fritz!box7113_wpakey.png

FrontierXXXX [0-9] Len: 10

Hitron [0-9 A-Z] Len: 12 Serial # possible key

INFINITUM#### [0-9] Len: 10 http://www.websec.ca/img/mac2wepkey/image12.png

iPhone 5 Lowercase word plus 4 # ??

Keenetic-XXXX [a-zA-Z0-9] Len: 8

Linkem_XXXXXX [0-9] Len: 8

Livebox-XXXX ?? ??

MEO-###### [0-9A-F] Len: 10 https://www.wifi-libre.com/img/members/96/DATOS-MEO.jpg

mifi2 [0-9 A-Z] Len: 13

MobileWifi-xxxx [0-9] Len: 8

MYWIFI (EE) [MYWIFI + 4 numbers] Len: 10

NETGEARXX [Adjective + Noun + 3 Digits] Len: Varies https://hashcat.net/forum/thread-4463.html

Netia-XXXXXX [0-9a-f] Len:13 http://www.pomagam.net/images/asmax/P2290215.png

ONOXXXX [0-9] Len: 10

Orange-0a0aa0 [0-9a-f] Len: 8

Orange-AA0A00 [0-9A-F] Len: 12

Orange-XXXX [2345679ACEF] Len: 8

PLDT [PLDTWIFI + Last 5 of MAC] Len: 13

Plusnet Broadband UK [0-9a-zA-Z] Len: 64

PlusnetWireless-XXXXXX [0-9A-F] Len: 10

PLUSNET-XXXXXX [0-9a-f] Len: 10 Possible [2-9a-f]

Sitecom_XXXX [0-9A-F] Len: 8

SKYXXXXX [A-Z] Len: 8 http://www.ph-mb.com/products/sky-calc

SmartRG [0-9a-f] Len: 10 Default pasword is the MAC address

SpeedTouchXXXXXX [0-9a-f] Len: 10

TALKTALK-XXXXXX [346789ABCDEFGHJKMNPQRTUVWXY] Len: 8

TDC-#### [0-9a-f] Len: 9 Possible [1-9a-f]

Tech_XXXXXXXX [A-Z] Len: 8 http://www.netia.pl/files/pomoc/tech_instr.pdf

Technicolor-Router [0-9A-F] Len: 10

Telecom-XXXXXXXX ?? ?? http://www.dreamsnet.it/wp-content/uploads/router-alice-ip-aleternativo-indirizzo-mac.jpg

TelstraXXXXXX [0-9A-F] Len: 10 http://s9.postimg.org/6nocruw5b/Telstra_XXXXXX_Technicolor_TG797nv3.png

TELUSXXXX [0-9a-f] Len: 10

TEW-###DRU ###+ last 8 of serial] Len: 11 https://forums.kali.org/showthread.php?26366-TRENDnet-WPA-disclosure-amp-dictionaries

Thomson [0-9A-F] Len: 10

ThomsonXXXXXX [0-9a-f] Len: 10

TIM_PN51T_XXXX [0-9] Len: 8 WPS pin is 12345670 WPS can't be disabled

TNCAP-XXXX [0-9A-F] Len: 10

TNCAPXXXXXX [0-9A-F] Len: 10 http://www.crack-wifi.com/forum/topic-9372-technicolor-td5130-0018e7.html

TP-LINK_#### [0-9] Len: 8

TP-LINK_###### [0-9A-F] Len: 8

TRENDnetXXX-###XXX [### of SSID ?d?d?d?d?d?d?d?d] Len: 11 https://forum.hashkiller.co.uk/topic-view.aspx?t=2715&m=108547#108547

TRKASHI-###### [?d?d######] Len: 8 https://forum.hashkiller.co.uk/topic-view.aspx?t=2715&m=64032#64032

UNITE-XXXX [0-9] Len: 8 http://chipchickcom.wpengine.netdna-cdn.com/wp-content/uploads/2013/01/screenshot_733.jpg

UPCXXXXXXX [A-Z] Len: 8

Verizon MIFIXXXX XXXX [0-9] Len: 11 http://www.willhackforsushi.com/images/mifi-label.jpg

Virgin Media [abcdefghjklmnpqrstuvwxyz] Len: 8

virginmediaXXXXXX [abcdefghjklmnpqrstuvwxyz] Len: 8 I and o omitted

VirginMobile MiFiXXXX XXX [0-9] Len: 11 https://theonbutton.files.wordpress.com/2010/09/virgin-mobile-mifi-2200-battery.jpg

VMXXXXXXX [0-9a-zA-Z] Len:12 https://forum.hashkiller.co.uk/topic-view.aspx?t=2715&m=100456#100456

VMXXXXXXX-2G [abcdefghjklmnpqrstuvwxyz] Len: 8 I and o omitted

VMXXXXXXX-5G [abcdefghjklmnpqrstuvwxyz] Len: 8 I and o omitted http://store.virginmedia.com/images/discover/help2/topics/hub_05.jpg

Vodaphone_XXXXXXXX [0-9 a-z] Len: 15

WebCube#### [0-9A-F] Len: 8 https://images.futurezone.at/cube_2.jpg/fuzo-slideshow-slide/24.549.231

WLAN1-XXXXXX [0-9A-F] Len: 10 http://www.4gltemall.com/blog/wp-content/uploads/2013/10/Back-stick-of-HUAWEI-B593u-12.jpg

ZyXELXXXXXX [10:0-9 A-F][13:0-9 A-Z] Len: 10 or 13


+rep if I helped. GTX 750 Ti & GTX 550
Github: https://github.com/PurpleNinja225/Hash-Cracking Discord: PurpleNinja225 #6785

Tipz Jar:
BTC 321aVnFwQrhZcHoCoPzp1Vh46rUiQmExzp
ETH 0xF5ab8429F6991f0232Dd4A0eB8318a4e172b1282

Attachments: Login to view attachments.
Avatar
sjackjacka

Status: n/a
Joined: Thu, 12 Jul 2018
Posts: 10
Team:
Reputation: 1 Reputation
Offline
Sat, 14 Jul 2018 @ 14:26:20

Purpleninja225 said:

Recompiled the list in the first post as well as added some routers from other forums that have similar posts into a nice and pretty excel sheet. The sheet can be sorted by the different headers to get a better idea of everything. Here it all is as well as the file for offline use. Also, not all the hypelinks copied correctly, you'll just have to manually copy and paste them into a browser to open.

Note: I don't take credit for originally obtaining this info, I just gathered it from a couple places and made it look a little more organized.

Let me know if I missed anything or made a mistake.

Linkem_XXXXXX [0-9] Len: 8

Linkem old version as only [0-9] keyspace, while the new one, which is in the form Linkem_2.4GHzXXXXXX is [0-9][a-z]


Avatar
Purpleninja225

Status: n/a
Joined: Thu, 05 Jul 2018
Posts: 94
Team:
Reputation: 182 Reputation
Offline
Sat, 14 Jul 2018 @ 21:18:09

sjackjacka said:

Linkem old version as only [0-9] keyspace, while the new one, which is in the form Linkem_2.4GHzXXXXXX is [0-9][a-z]


Thanks @sjackjacka I'll update the list!


+rep if I helped. GTX 750 Ti & GTX 550
Github: https://github.com/PurpleNinja225/Hash-Cracking Discord: PurpleNinja225 #6785

Tipz Jar:
BTC 321aVnFwQrhZcHoCoPzp1Vh46rUiQmExzp
ETH 0xF5ab8429F6991f0232Dd4A0eB8318a4e172b1282

Avatar
ari101

Status: n/a
Joined: Sun, 24 Jun 2018
Posts: 5
Team:
Reputation: 0 Reputation
Offline
Mon, 30 Jul 2018 @ 18:39:04

Does anyone know the default keyspace for

UPCXXXXXXXXX


Avatar
gpuhash_me

Status: Cracker
Joined: Sun, 08 Nov 2015
Posts: 439
Team: gpuhash team
Reputation: 840 Reputation
Offline
Mon, 30 Jul 2018 @ 21:07:45

ari101 said:

Does anyone know the default keyspace for

UPCXXXXXXXXX

| UPC240928716 | 9U7QTAEA |
| UPC241343196 | KJUUVTYB |
| UPC241423698 | WVMTNVQD |
| UPC242831215 | DJUHPKBF |
| UPC244581310 | PJVHTUVT |
| UPC245822946 | KFSDJBQB |
| UPC247061299 | ZAXDGXCW |
| UPC248169666 | MPFSDPPY |
| UPC248316942 | KH7GLXQG |


GPUHASH.me team official representative
Support, discounts, free offers for forum members

Avatar
ari101

Status: n/a
Joined: Sun, 24 Jun 2018
Posts: 5
Team:
Reputation: 0 Reputation
Offline
Mon, 30 Jul 2018 @ 23:26:28

gpuhash_me said:

ari101 said:

Does anyone know the default keyspace for

UPCXXXXXXXXX

| UPC240928716 | 9U7QTAEA |
| UPC241343196 | KJUUVTYB |
| UPC241423698 | WVMTNVQD |
| UPC242831215 | DJUHPKBF |
| UPC244581310 | PJVHTUVT |
| UPC245822946 | KFSDJBQB |
| UPC247061299 | ZAXDGXCW |
| UPC248169666 | MPFSDPPY |
| UPC248316942 | KH7GLXQG |

That's really helpful. Thanks.

So, I guess I should just try bruteforcing the captured Handshake using 8 Uppercase letters. A few hours?


Avatar
Purpleninja225

Status: n/a
Joined: Thu, 05 Jul 2018
Posts: 94
Team:
Reputation: 182 Reputation
Offline
Mon, 30 Jul 2018 @ 23:30:11

That would be a good start. It looks like it's possible for at least 1 digit to be present though.


+rep if I helped. GTX 750 Ti & GTX 550
Github: https://github.com/PurpleNinja225/Hash-Cracking Discord: PurpleNinja225 #6785

Tipz Jar:
BTC 321aVnFwQrhZcHoCoPzp1Vh46rUiQmExzp
ETH 0xF5ab8429F6991f0232Dd4A0eB8318a4e172b1282

Avatar
gpuhash_me

Status: Cracker
Joined: Sun, 08 Nov 2015
Posts: 439
Team: gpuhash team
Reputation: 840 Reputation
Offline
Tue, 31 Jul 2018 @ 05:45:37

ari101 said:

That's really helpful. Thanks.

So, I guess I should just try bruteforcing the captured Handshake using 8 Uppercase letters. A few hours?

8 uppercase letters default password is for UPCXXXXXXX (X - digit). As you can see from the above list we have digits sometimes in real passwords of UPCXXXXXXXXX (X-digit). But we don't have enough samples to say if they used all digits 0-9 or just part like TALKTALK passwords.


GPUHASH.me team official representative
Support, discounts, free offers for forum members

Avatar
ari101

Status: n/a
Joined: Sun, 24 Jun 2018
Posts: 5
Team:
Reputation: 0 Reputation
Offline
Wed, 01 Aug 2018 @ 12:50:36

gpuhash_me said:

ari101 said:

That's really helpful. Thanks.

So, I guess I should just try bruteforcing the captured Handshake using 8 Uppercase letters. A few hours?

8 uppercase letters default password is for UPCXXXXXXX (X - digit). As you can see from the above list we have digits sometimes in real passwords of UPCXXXXXXXXX (X-digit). But we don't have enough samples to say if they used all digits 0-9 or just part like TALKTALK passwords.

Yes, I get the point but the examples are encouraging. Bruteforcing 8 uppercase letters seems like the logical starting point. I still have to capture. a handshake and there are no clients and seemingly no activity. I ran Wifite2 against it as it is WPS but that didn't work. I'm sure someone will connect eventually.


Avatar
Sweex

Status: n/a
Joined: Sat, 04 Aug 2018
Posts: 1
Team:
Reputation: 0 Reputation
Offline
Sat, 04 Aug 2018 @ 09:49:31

TALKTALKXXXXXX
a4:71:74:35:73:6c

SKYXXXXX
c0:3e:0f:de:1d:19

SKYXXXXX
78:3e:53:8b:6f:f6

TALKTALKXXXXXX
20:a6:80:5d:e7:88

TALKTALKXXXXXX
40:9b:cd:05:b0:b2

SKYXXXXX
70:50:af:7f:99:62

HELLO somebody have any pins


Avatar
dipeperon

Status: n/a
Joined: Tue, 03 Apr 2018
Posts: 76
Team:
Reputation: 100 Reputation
Offline
Sat, 04 Aug 2018 @ 13:03:16

Sweex said:

TALKTALKXXXXXX
a4:71:74:35:73:6c

SKYXXXXX
c0:3e:0f:de:1d:19

SKYXXXXX
78:3e:53:8b:6f:f6

TALKTALKXXXXXX
20:a6:80:5d:e7:88

TALKTALKXXXXXX
40:9b:cd:05:b0:b2

SKYXXXXX
70:50:af:7f:99:62

HELLO somebody have any pins

TALKTALK-XXXXXX is

346789ABCDEFGHJKMNPQRTUVWXY,?1?1?1?1?1?1?1?1


SKYXXXXX is
?u,?1?1?1?1?1?1?1?1

see http://www.ph-mb.com/products/sky-calc


My haschat stuff (rules, scripts): https://github.com/theherp/Hashcat-stuff

Avatar
nasrallah

Status: n/a
Joined: Mon, 06 Aug 2018
Posts: 14
Team:
Reputation: 0 Reputation
Offline
3 days ago

What about
Cambridge Industries



343 Results - Page 12 of 12 -
1 2 3 4 5 6 7 8 9 10 11 12

We have a total of 151566 messages in 18770 topics.
We have a total of 17897 registered users.
Our newest registered member is ziadeh.