NOTE: Why not use our List Manager to crack your lists? Its easy and enables better management.

NOTE: When cracking WPA/WPA2 passwords, make sure you check gpuhash.me first incase it's already been processed.

Home - Wireless Cracking - Default Router WPA Keys - Keyspace Used


405 Results - Page 6 of 14 -
1 2 3 4 5 6 7 8 9 10 11 12 13 14
Author Message
Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3198
Team: HashKiller
Reputation: 4152 Reputation
Offline
Mon, 03 Oct 2016 @ 16:23:15

Nice find winxp5421


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080

Avatar
winxp5421
Moderator
Status: Trusted
Joined: Sun, 07 Sep 2014
Posts: 454
Team:
Reputation: 573 Reputation
Offline
Tue, 04 Oct 2016 @ 13:27:41

As an amendment to the previous post.

SSID: TRENDnet828* Mask: 828?dRG?d?d?d?d?d


SSID: TRENDnet823* Mask: 823?d23?d?d?d?d?d

SSID: TRENDnet820* Mask: 820?d20?d?d?d?d?d

SSID: TRENDnet818* Mask: 818?dRG?d?d?d?d?d

SSID: TRENDnet815* Mask: 815?dAC?d?d?d?d?d

SSID: TRENDnet813* Mask: G?d?d?dR?d?d?d

SSID: TRENDnet812* Mask: 812?dRD?d?d?d?d?d

SSID: TRENDnet811* Mask: 811?dRE?d?d?d?d?d


SSID: TRENDnet753* Mask: 753?d7D?d?d?d?d?d


SSID: TRENDnet752* Mask: 752RD?d?d?d?d?d?d

SSID: TRENDnet751* Mask: 751RD?d?d?d?d?d?d

SSID: TRENDnet750* Mask: 750RD?d?d?d?d?d?d

SSID: TRENDnet735* Mask: 735?d7A?d?d?d?d?d

SSID: TRENDnet733* Mask: 733RN?d?d?d?d?d?d

SSID: TRENDnet732* Mask: 732?d32?d?d?d?d?d


8x Saphire 7950's
1x 7970
2x R9 290's
4x R9 270's
2x 7850's
2x GTX980 hydrocoppers
BTC: 1LbrZVuaiBXJqvbuYDRbEK5ZdvPg17TYvE
Keybase Identification

Avatar
rickyspanish

Status: n/a
Joined: Sun, 11 Sep 2016
Posts: 39
Team:
Reputation: 0 Reputation
Offline
Fri, 07 Oct 2016 @ 17:57:12

anyone seen this sky essid skyxxxxx_xxx dose it have the same keyspace


Avatar
dots

Status: n/a
Joined: Fri, 22 May 2015
Posts: 23
Team:
Reputation: 0 Reputation
Offline
Sun, 09 Oct 2016 @ 16:10:14

This is a new provider in ireland called eir
https://www.sendspace.com/file/d3i8dy


Avatar
FYO

Status: n/a
Joined: Thu, 13 Oct 2016
Posts: 2
Team:
Reputation: 0 Reputation
Offline
Thu, 13 Oct 2016 @ 23:04:08

Telecom-XXXXXXXX (last image in first post) is [0-9a-zA-Z] Len: 24
http://img1.annuncicdn.it/9b/ab/9babb9112489687a111d763acd746b48_orig.jpg

Valid also for (same ISP changed name, was Alice-some of this got algo broken, than Telecom-, and now TIM-)
Alice-XXXXXXXX
TIM-XXXXXXXX


Avatar
ghostriderbravo

Status: n/a
Joined: Mon, 21 Nov 2016
Posts: 14
Team:
Reputation: 0 Reputation
Offline
Tue, 22 Nov 2016 @ 00:58:54

BELLALIANT### - [0-9] Len: 10 : ACTIONTEC R1000H EX:4288329276 Mask: ?d?d?d?d?d?d?d?d?d?d
FibreOP### - [0-9a-z] Len: 16 : ACTIONTEC R3000 EX: ATCA6YWT2PPPAFA3 Mask: ?1?1?1?1?1?1?1?1?1?1?1?1?1?1?1?1 (1 = ?u?d)
Rogers##### - [0-9a-f] Len: 11 : HITRON CGN2 EX: F1A67Rogers Mask: ?1?1?1?1?1Rogers (1 = ?u?d)


Avatar
Nighthawk[TECH]

Status: n/a
Joined: Wed, 23 Nov 2016
Posts: 1
Team:
Reputation: 0 Reputation
Offline
Wed, 23 Nov 2016 @ 23:20:36

Doing a bit of WPA auditing down-under. I've come across some interesting router keyspaces from two of the big telcos:

Telstra 4G wireless access points using ZTE 910 hardware (known as ZTE 831FT in Europe and Russia).
They have ESSIDs that follow the pattern TPW4G_XXXXXX and have an apparent keyspace of [0-9A-F] Len: 10.
However, browsing Google Images, I have encountered five examples that show that all stock passphrases appear to start with 8747 and the remainder (Len: 6) is [0-9A-F]
From images:
ESSID Pass
TPW4G_4F7302 874739AAC6
TPW4G_1D0F5E 8747F8D4B1
TPW4G_1EB33E 8747C72621
TPW4G_BEA85E 8747B5A62A
TPW4G_7C5B23 8747E2BEFA
I have not captured anything in the wild. Can anyone confirm that this is the (highly insecure) pattern?

Optus (also known as Yes-Optus)
ADSL2+/National Broadband Network (NBN) Routers manufactured by Sagemcom, model F@st 3864 (two letter codes are sometimes appended to the end: OP for, I presume, "Optus" and AC for 802.11ac support)
Much more secure. I actually own two of these.
ESSID BSSID Pass
OPTUS_1DC390 F0:82:61:1D:C3:90 lirasriper33483 <---- old one of mine
OPTUS_DF1F53 88:A6:C6:DF:1F:53 tiddycrowd53260 <---- mine
OPTUS_C5C31F 18:62:2C:C5:C3:1F curlyduets94847 <--- Google images
OPTUS_B7AD70 18:1E:78:B7:AD:70 zoppopunty16312 <--- Google images
OPTUS_0A1887 44:E9:DD:0A:18:87 ouphestots03635 <--- Google images

The pattern is Len 15, Mask ?l?l?l?l?l?l?l?l?l?l?d?d?d?d?d , but what I find most interesting is that they appear to have used a pseudorandom function to generate the words. They are still readable to an English-speaking person and are therefore easier to remember, but they are not common dictionary words (with the exception of curlyduets).
Two things to explore: Do they ever reuse words? Can one always split the ten letters into two five letter words?

I think to make a run at one of these routers one would have to generate a rule set to create human-readable five letter chunks and then use a combinator + ?d?d?d?d?d + large amount of GPU power.


Avatar
gpuhash_me

Status: Trusted
Joined: Sun, 08 Nov 2015
Posts: 804
Team: gpuhash team
Reputation: 1595 Reputation
Offline
Thu, 24 Nov 2016 @ 05:45:56

Just my $0.02:

| OPTUS_B70BA9 | bobacwindy26086 |
| OPTUS_D7DA52 | limeymoxie02493 |
| OPTUS_25E3AC | taxedquoad53551 |
| OPTUS_B5D1E8 | gowanpocky21921 |
| OPTUS_C6DE6A | louseblite64531 |
| OPTUS_25F80A | fluffroupy29652 |

| OPTUSDNDD9302 | sheetplacepumpsceria85919 |
| OPTUSDN517DF6 | simpsgirthgessocabob |
| OPTUSDNF25548 | aegisabbesaditshertz49493 |
| OPTUSDNA654D8 | ikonsrotlsfaresduchy65182 |
| OPTUSDNF25548 | aegisabbesaditshertz49493 |
| OPTUSDN6CDAB6 | jaxdanielblayney |

| OPTUSA722BAC | YUEUYBWDFVEVWTC18372 |
| OPTUSA6F1B4C | EEADVUWXXXYFUFY55489 |
| OPTUSA26C704 | TDVDTYXCZZYXWYU99849 |
| OPTUSAE9320C | FWETACYVXFZBAYX84891 |
| OPTUSAE9359E | WZZATZVUVEFTCAE19160 |
| OPTUSAF15A26 | EVBWZVBTYBZXWAY63218 |
| OPTUSAF824A4 | AXUWXEAUAZEEWTY99288 |
| OPTUSVD38D35B8 | CAKEYVIZIR07768 |
| OPTUSAA7F1F4 | SGVWPDWPAZPDGRC34378 |



Head of cheap publicity department
Support, discounts, free offers for HK members
BTC: 1GPUHASHckzcL2fDXyGSc2WNqpFjJZbFaN

Avatar
ZeroHashesPerSec

Status: n/a
Joined: Thu, 19 Jan 2017
Posts: 11
Team:
Reputation: 12 Reputation
Offline
Fri, 27 Jan 2017 @ 06:51:41

Because I don't want to take take take from the communiity here is a photo I took a few months ago of a new Sky Q router hub that came with (you guessed it) Sky Q Silver. It basically looks like that instead of 8 upper case chars it's now 10 for these sky q routers.


Attachments: Login to view attachments.
Avatar
Felis-Sapiens

Status: n/a
Joined: Thu, 07 Jul 2016
Posts: 162
Team:
Reputation: 361 Reputation
Offline
Fri, 27 Jan 2017 @ 07:36:51

said:

Because I don't want to take take take from the communiity here is a photo I took a few months ago of a new Sky Q router hub that came with (you guessed it) Sky Q Silver. It basically looks like that instead of 8 upper case chars it's now 10 for these sky q routers.


Yes, Sky Q Hub routers have a 10-chars password. Probable keyspace is BCDFLMNPQRSTVWXY.


Avatar
Gort

Status: Trusted
Joined: Mon, 16 Jan 2017
Posts: 183
Team:
Reputation: 170 Reputation
Offline
Fri, 27 Jan 2017 @ 07:52:00

As the SkyQ is using the same Sky SSID format, the immediate concern
is being able to identify them reliably, from MAC OUI, 5GHz
transmissions, or any 802.11 information elements.


BTC: 12QTTgtbSHqxseW2Hnt5qzrngvBRXgTEj4

Avatar
almondo

Status: n/a
Joined: Fri, 17 Feb 2017
Posts: 93
Team:
Reputation: 48 Reputation
Offline
Fri, 17 Feb 2017 @ 21:18:05

Routor: TD5130
SSID: TNCAP9388E8
WPA-Key: 580C05A631
WPS-Pin:90467912
MAC: 00:18:E7:93:88:E8
SN: 1150A1D05173
GW: DSLBE5130MAE1


Routor: TD5130
SSID: TNCAP948BE4
WPA-Key: 079A40DEFB
WPS-Pin: 37017422
MAC: 00:18:E7:94:8B:E4
SN: 1150A1D18433
GW: DSLBE5130MAE1


Routor: TD5130
SSID: TNCAP96C99F
WPA-Key: F3D70D3689
WPS-Pin: 12456789
MAC: 00:18:E7:96:C9:9F
SN: 1201A1D08658
GW: DSLBE5130MAE1


Routor: TD5130
SSID: TNCAPA4CAFF
WPA-Key: 5E00C7B723
WPS-Pin: 71095837
MAC: 00:18:E7:A4:CA:FF
SN: 1211A1D03863
GW: DSLBE5130MAE1


Routor: TD5130
SSID: TNCAP936D45
WPA-Key: 4E35E2A17A
WPS-Pin: 90427145
MAC: 00:18:E7:93:6D:45
SN: 1150A1D03750
GW: DSLBE5130MAE1


Routor: TD5130
SSID: TNCAP938028
WPA-Key: 3BC2B03785
WPS-Pin: 15061591
MAC: 00:18:E7:93:80:28
SN: 1150A1D04725
GW: DSLBE5130MAE1


Routor: TD5130
SSID: TNCAP941A8D
WPA-Key: 842B159901
WPS-Pin: 79489515
MAC: 00:18:E7:94:1A:8D
SN: 1150A1D12630


Avatar
almondo

Status: n/a
Joined: Fri, 17 Feb 2017
Posts: 93
Team:
Reputation: 48 Reputation
Offline
Fri, 17 Feb 2017 @ 21:32:10

SSID: TNCAPA5586C
WPS: 92303492
Key: 0FE34A706F


SSID: TNCAP965820
WPS: 21398582
Key: 433379FBEA


SSID: TNCAP29B728
WPS: 36851966
Key: 770D617EC2


SSID: TNCAP30C330
WPS: 61235045
Key: A4ADE4FCD2

SSID: TNCAPB346FE
WPS: 53456526
Key: 5D6A36D468



Avatar
almondo

Status: n/a
Joined: Fri, 17 Feb 2017
Posts: 93
Team:
Reputation: 48 Reputation
Offline
Fri, 17 Feb 2017 @ 21:49:01

SSID: TNCAPCFB52D
WPS: 50076970
WPA: CA3D6D1D55
MAC: A6:6A:1A:46:91:24

SSID: TNCAPD00030
WPS: 32260564
WPA: A6E7EBAFC1
MAC: A6:00:40:D0:74:9D


Avatar
soxrok2212

Status: Cracker
Joined: Sat, 24 Oct 2015
Posts: 455
Team:
Reputation: 421 Reputation
Offline
Fri, 17 Feb 2017 @ 22:27:03

Here is some data from Sky Q routers:


SKYD0C62 BCPNWBVLPD
SKY91505 RNQMYPTFNY
SKYB564D VNTDYXBTVB
SKY499C4 WPWMRRNMDT
SKYAA967 XYLPBXVFNL
SKYE3C9A PSYLBPMYBM
SKYC2E56 CLNBRRFVXC
SKY3E91F LVMYNNNXPS


Perhaps could narrow this down, I found N and B were used particularly a lot.



BTC: 1B4ZAbWYQ399p6QJm3VLbywiCWVSBAXYJ1

NVIDIA
1x GTX 1080 Founder’s Edition
1x GTX 980 Reference Design

Avatar
Gort

Status: Trusted
Joined: Mon, 16 Jan 2017
Posts: 183
Team:
Reputation: 170 Reputation
Offline
Sat, 18 Feb 2017 @ 03:30:50

soxrok2212 said:

Here is some data from Sky Q routers:


SKYD0C62 BCPNWBVLPD
SKY91505 RNQMYPTFNY
SKYB564D VNTDYXBTVB
SKY499C4 WPWMRRNMDT
SKYAA967 XYLPBXVFNL
SKYE3C9A PSYLBPMYBM
SKYC2E56 CLNBRRFVXC
SKY3E91F LVMYNNNXPS


Perhaps could narrow this down, I found N and B were used particularly a lot.

How come you are finding more of these from the US?

There is also SKYB5847 PDDVWXPRNB from DizzyAdam

Just checked these against the proposed set of [BCDFLMNPQRSTVWXY] from
Felis Sapiens earlier in this thread and they all fall inside that space
(This table is going to look a complete mess without a fixed font, but
you should get the drift - tried adding a font tag, but HTML is blocked)

BCDFLMNPQRSTVWXY
SKYD0C62 BCPNWBVLPD BCD L NP VW
SKY91505 RNQMYPTFNY F MNPQR T Y
SKYB564D VNTDYXBTVB B D N TV XY
SKY499C4 WPWMRRNMDT D MNP R T W
SKYAA967 XYLPBXVFNL B FL NP V XY
SKYE3C9A PSYLBPMYBM B LM P S Y
SKYC2E56 CLNBRRFVXC BC FL N R V X
SKY3E91F LVMYNNNXPS LMNP S V XY
SKYB5847 PDDVWXPRNB B D NP R VWX

Looking more and more like 16^10 for SkyQ now.

+rep to you for sharing and +rep to Felis Sapiens for that [BCDFLMNPQRSTVWXY]


BTC: 12QTTgtbSHqxseW2Hnt5qzrngvBRXgTEj4

Avatar
soxrok2212

Status: Cracker
Joined: Sat, 24 Oct 2015
Posts: 455
Team:
Reputation: 421 Reputation
Offline
Sat, 18 Feb 2017 @ 07:27:19

U.K. eBay search there's a lot of them out there, just have to look!



BTC: 1B4ZAbWYQ399p6QJm3VLbywiCWVSBAXYJ1

NVIDIA
1x GTX 1080 Founder’s Edition
1x GTX 980 Reference Design

Avatar
Gort

Status: Trusted
Joined: Mon, 16 Jan 2017
Posts: 183
Team:
Reputation: 170 Reputation
Offline
Sat, 18 Feb 2017 @ 08:50:35

soxrok2212 said:

U.K. eBay search there's a lot of them out there, just have to look!

That was a good haul from just Ebay.

Not only do you have to find a listing, but you need to find one
where the seller has photographed it fully with a half decent camera.

I am clearly not trying hard enough


BTC: 12QTTgtbSHqxseW2Hnt5qzrngvBRXgTEj4

Avatar
cvsi
Moderator
Status: Trusted
Joined: Fri, 23 May 2014
Posts: 2466
Team:
Reputation: 3608 Reputation
Online
Sat, 18 Feb 2017 @ 12:36:38

Ebay and google images have always been my go to for trying to build a list of known's up.
Also a good place to help figure out what the keyspace is supposed to be.


Please read the forum rules. | Please read the paid section rules.

GTX 1080 Ti , GTX 1080 , 1070 Ti , 2x GTX 1070 Everything watercooled

BTC - 3CwoAwqYgNSZpzzZ2FEjXYceXR2Wr2wTtD
ETH - 0x47D0A7cDA8b330b1729e554BCa5574dc60c51b1f

Avatar
almondo

Status: n/a
Joined: Fri, 17 Feb 2017
Posts: 93
Team:
Reputation: 48 Reputation
Offline
Sat, 18 Feb 2017 @ 12:45:36

This might help: (spanish) (someone speak spanish please translate)
http://pastebin.com/91p45eSN


Avatar
judithxx

Status: n/a
Joined: Sat, 17 Dec 2016
Posts: 177
Team:
Reputation: 67 Reputation
Offline
Sat, 18 Feb 2017 @ 13:05:35

almondo said:

This might help: (spanish) (someone speak spanish please translate)
http://pastebin.com/91p45eSN

ESSID,MAC,CLAVE,COMENTARIO = ESSID, MAC, Key, Comments


If I helped you, feel free to either +rep or donate below :)

1P56z7UjuFfmVypE8DfHUSodv4LVURzHoq

Avatar
almondo

Status: n/a
Joined: Fri, 17 Feb 2017
Posts: 93
Team:
Reputation: 48 Reputation
Offline
Sat, 18 Feb 2017 @ 13:37:11


Avatar
Gort

Status: Trusted
Joined: Mon, 16 Jan 2017
Posts: 183
Team:
Reputation: 170 Reputation
Offline
Sat, 18 Feb 2017 @ 18:03:40

soxrok2212 said:

Here is some data from Sky Q routers:
SKYD0C62 BCPNWBVLPD
SKY91505 RNQMYPTFNY
SKYB564D VNTDYXBTVB
SKY499C4 WPWMRRNMDT
SKYAA967 XYLPBXVFNL
SKYE3C9A PSYLBPMYBM
SKYC2E56 CLNBRRFVXC
SKY3E91F LVMYNNNXPS

Do you have the MAC addresses for any of these?


BTC: 12QTTgtbSHqxseW2Hnt5qzrngvBRXgTEj4

Avatar
soxrok2212

Status: Cracker
Joined: Sat, 24 Oct 2015
Posts: 455
Team:
Reputation: 421 Reputation
Offline
Sat, 18 Feb 2017 @ 18:31:13

I don't be unfortunately, none of the pictures had both the password and the MAC address.



BTC: 1B4ZAbWYQ399p6QJm3VLbywiCWVSBAXYJ1

NVIDIA
1x GTX 1080 Founder’s Edition
1x GTX 980 Reference Design

Avatar
Gort

Status: Trusted
Joined: Mon, 16 Jan 2017
Posts: 183
Team:
Reputation: 170 Reputation
Offline
Sat, 18 Feb 2017 @ 18:36:41

soxrok2212 said:

Here is some data from Sky Q routers:
SKYD0C62 BCPNWBVLPD
SKY91505 RNQMYPTFNY
SKYB564D VNTDYXBTVB
SKY499C4 WPWMRRNMDT
SKYAA967 XYLPBXVFNL
SKYE3C9A PSYLBPMYBM
SKYC2E56 CLNBRRFVXC
SKY3E91F LVMYNNNXPS

Found some more myself now

SKY0F122 YYMXTFSMFP
SKY583B0 NTPNNFBFDN C0:3E:0F:F7:F8:E8
SKY6381D NLTWPPBRSV
SKYC2E56 CLNBRRFVXC

All still falling in the [BCDFLMNPQRSTVWXY] charset.

The mistake I was making was searching on Ebay for SkyQ. It has to be Sky Q
for most listings.

Only found one with its MAC address. This is rarely in the images, unless the
bottom of the router has been photographed.

I am now more interested in finding more examples with their MAC addresses.

If anyone finds any more with MAC address, there is guaranteed +rep
waiting from me.

Also, if anyone finds one with a passphrase outside the [BCDFLMNPQRSTVWXY]
charset, please post that as well, with the image attached or linked.


BTC: 12QTTgtbSHqxseW2Hnt5qzrngvBRXgTEj4

Avatar
malte333

Status: n/a
Joined: Sat, 11 Feb 2017
Posts: 21
Team:
Reputation: 16 Reputation
Offline
Sat, 18 Feb 2017 @ 19:13:48

found some Sky Q, but without MAC ...


SKY54641 XDVNNVTLWN
SKY89F48 QNDXTFMSLX
SKYA329E BBCYYBQWBL
SKY24AF7 CYBVQDNWNR
SKY5381D NLTWPPBRSV


Avatar
Gort

Status: Trusted
Joined: Mon, 16 Jan 2017
Posts: 183
Team:
Reputation: 170 Reputation
Offline
Sat, 18 Feb 2017 @ 19:24:21

malte333 said:

found some Sky Q, but without MAC ...
SKY54641 XDVNNVTLWN
SKY89F48 QNDXTFMSLX
SKYA329E BBCYYBQWBL
SKY24AF7 CYBVQDNWNR
SKY5381D NLTWPPBRSV

OK, I will rep you +5 for your contribution
Thanks!


BTC: 12QTTgtbSHqxseW2Hnt5qzrngvBRXgTEj4

Avatar
malte333

Status: n/a
Joined: Sat, 11 Feb 2017
Posts: 21
Team:
Reputation: 16 Reputation
Offline
Sat, 18 Feb 2017 @ 19:35:23

Gort said:


OK, I will rep you +5 for your contribution
Thanks!

thanks.
here is another one:
SKYF1F68 PVCCQWMCFF


Avatar
almondo

Status: n/a
Joined: Fri, 17 Feb 2017
Posts: 93
Team:
Reputation: 48 Reputation
Offline
Sat, 18 Feb 2017 @ 19:36:50

SKY1F6A6 XNBTVCDYFQ
SKY5CBDC MMTWNDSNWN
SKYA2FC2 VFFCMPBXQL
SKYF6C6A NTRBNBWNTF

I found only one pic with a mac address but it was a very low resolution.

I wish I could help more.


Avatar
Gort

Status: Trusted
Joined: Mon, 16 Jan 2017
Posts: 183
Team:
Reputation: 170 Reputation
Offline
Sat, 18 Feb 2017 @ 19:54:47

malte333 said:

Gort said:


OK, I will rep you +5 for your contribution
Thanks!

thanks.
here is another one:
SKYF1F68 PVCCQWMCFF

+1 rep for that

I can see I will be busy with this


BTC: 12QTTgtbSHqxseW2Hnt5qzrngvBRXgTEj4


405 Results - Page 6 of 14 -
1 2 3 4 5 6 7 8 9 10 11 12 13 14

We have a total of 188793 messages in 23412 topics.
We have a total of 21208 registered users.
Our newest registered member is radikalcid.