NEW: We have a Discord server now. Click here to go there now!

NOTE: Why not use our List Manager to crack your lists? Its easy and enables better management.

NOTE: When cracking WPA/WPA2 passwords, make sure you check gpuhash.me first incase it's already been processed.

Home - WPA Packet Cracking - NOWTVXXXXX


28 Results - Page 1 of 1 -
1
Author Message
Avatar
StillBlue

Status: n/a
Joined: Tue, 06 Dec 2016
Posts: 64
Team:
Reputation: 0 Reputation
Offline
Fri, 08 Feb 2019 @ 22:54:01

Are these the same as the Sky Q boxes, and can anyone help me with this.

Many thanks


Attachments: Login to view attachments.
Avatar
Rezza

Status: n/a
Joined: Sun, 07 Oct 2018
Posts: 40
Team:
Reputation: 0 Reputation
Offline
Mon, 11 Feb 2019 @ 08:39:20

I thought NOWTV was a streaming box and has to connect to an existing
AP or broadband connection?

What is the model of your NOWTV box acting itself as an AP?


Avatar
Rezza

Status: n/a
Joined: Sun, 07 Oct 2018
Posts: 40
Team:
Reputation: 0 Reputation
Offline
Mon, 11 Feb 2019 @ 09:06:05

Maybe the SSID is just some kind of Wi-Fi Direct connection for the remote
control or other feature?


Avatar
StillBlue

Status: n/a
Joined: Tue, 06 Dec 2016
Posts: 64
Team:
Reputation: 0 Reputation
Offline
Mon, 11 Feb 2019 @ 09:07:57

The NOWTV access point shows as Device name 'Sky Hub', manufacturer 'Sky'.

I am sure I read somewhere these are the Sky Q routers, with the same algorithm, but different SSID.


Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3213
Team: HashKiller
Reputation: 4165 Reputation
Offline
Mon, 11 Feb 2019 @ 09:15:37

OK found this image of a NOWTV box which is a router:

They do look like the new SKY ones and also have the same key lol

NOWTV82601
Key: TYYFCVYMVX (I think from what I can see from image)

Follows same SkyQ algo.


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 1JZGVq58m4RS1QQS8JE5xndzDFy2BvGU6y
GPU Power: 9x GTX 1070 + 6x GTX 1080

Avatar
StillBlue

Status: n/a
Joined: Tue, 06 Dec 2016
Posts: 64
Team:
Reputation: 0 Reputation
Offline
Mon, 11 Feb 2019 @ 09:16:35

https://en.wikipedia.org/wiki/Now_TV_(Sky)#Now_Broadband_Hubs


Avatar
Rezza

Status: n/a
Joined: Sun, 07 Oct 2018
Posts: 40
Team:
Reputation: 0 Reputation
Offline
Mon, 11 Feb 2019 @ 09:19:18

Maybe then it is a Now Broadband Hub?
The NR801 Now Broadband Hub Two is a re-brand of the ER115 Sky Q box
A capture with Probe Responses would have been more useful than hccapx


Avatar
StillBlue

Status: n/a
Joined: Tue, 06 Dec 2016
Posts: 64
Team:
Reputation: 0 Reputation
Offline
Mon, 11 Feb 2019 @ 09:19:18

I notice actually just doing a search on the forum that $cI$$0r$ has already solved one.

https://forum.hashkiller.co.uk/topic-view.aspx?t=24579&m=177310#177310


Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3213
Team: HashKiller
Reputation: 4165 Reputation
Offline
Mon, 11 Feb 2019 @ 09:19:27

Ah! Ignore my post here update mine above as key starts with 8, not B. Follows exact same SkyQ algo.


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 1JZGVq58m4RS1QQS8JE5xndzDFy2BvGU6y
GPU Power: 9x GTX 1070 + 6x GTX 1080

Avatar
Rezza

Status: n/a
Joined: Sun, 07 Oct 2018
Posts: 40
Team:
Reputation: 0 Reputation
Offline
Mon, 11 Feb 2019 @ 09:25:35

blandyuk said:


NOWTVB2601
Key: TYYFCVYMVX (I think from what I can see from image)

Look like an 8 to me, not a B in the SSID, so same algorithm as Sky Q


Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3213
Team: HashKiller
Reputation: 4165 Reputation
Offline
Mon, 11 Feb 2019 @ 09:27:18

Yup! Exactly the same as confirmed by $cI$$0r$ so owned. I can run SkyQ keys in ~4 hrs 20 mins.


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 1JZGVq58m4RS1QQS8JE5xndzDFy2BvGU6y
GPU Power: 9x GTX 1070 + 6x GTX 1080

Avatar
StillBlue

Status: n/a
Joined: Tue, 06 Dec 2016
Posts: 64
Team:
Reputation: 0 Reputation
Offline
Mon, 11 Feb 2019 @ 09:27:36

https://imgur.com/naR5YkZ


Avatar
StillBlue

Status: n/a
Joined: Tue, 06 Dec 2016
Posts: 64
Team:
Reputation: 0 Reputation
Offline
Mon, 11 Feb 2019 @ 09:28:24

Just uploading a raw cap too if that helps? 49.2mb.


Avatar
StillBlue

Status: n/a
Joined: Tue, 06 Dec 2016
Posts: 64
Team:
Reputation: 0 Reputation
Offline
Mon, 11 Feb 2019 @ 09:35:08

NOWTV-01.cap (49.2mb)

https://we.tl/t-D4tyNVttq8


Avatar
Rezza

Status: n/a
Joined: Sun, 07 Oct 2018
Posts: 40
Team:
Reputation: 0 Reputation
Offline
Mon, 11 Feb 2019 @ 09:35:51

StillBlue said:

Just uploading a raw cap too if that helps? 49.2mb.

It would have been better with an authenticated handshake on a keyspace
this large, but it looks like it must be a Sky Q clone now


Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3213
Team: HashKiller
Reputation: 4165 Reputation
Offline
Mon, 11 Feb 2019 @ 09:40:43

OK running it so we shall see We know the key ends in "S" following SkyQ rules.


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 1JZGVq58m4RS1QQS8JE5xndzDFy2BvGU6y
GPU Power: 9x GTX 1070 + 6x GTX 1080

Avatar
StillBlue

Status: n/a
Joined: Tue, 06 Dec 2016
Posts: 64
Team:
Reputation: 0 Reputation
Offline
Mon, 11 Feb 2019 @ 09:42:22

Thank you.


Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3213
Team: HashKiller
Reputation: 4165 Reputation
Offline
Mon, 11 Feb 2019 @ 09:42:52

Code:
Guess.Mask.......: ?2?2?2?2?2?2?2?2?2S [10]
Guess.Charset....: -1 Undefined, -2 NBPYVLMRXTCFWDSQ, -3 Undefined, -4 Undefined
Guess.Queue......: 1/1 (100.00%)
Speed.#3.........:   474.2 kH/s (160.19ms) @ Accel:16 Loops:1024 Thr:1024 Vec:1
Speed.#4.........:   473.9 kH/s (160.28ms) @ Accel:16 Loops:1024 Thr:1024 Vec:1
Speed.#5.........:   477.1 kH/s (157.57ms) @ Accel:16 Loops:1024 Thr:1024 Vec:1
Speed.#6.........:   473.9 kH/s (158.85ms) @ Accel:16 Loops:1024 Thr:1024 Vec:1
Speed.#7.........:   347.3 kH/s (341.00ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#8.........:   352.3 kH/s (323.05ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#9.........:   352.7 kH/s (330.90ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#10.........:   353.2 kH/s (328.12ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#11.........:   353.3 kH/s (323.87ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#12.........:   352.5 kH/s (326.67ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#13.........:   352.7 kH/s (326.38ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#14.........:   353.0 kH/s (333.03ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#*.........:  4716.1 kH/s


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 1JZGVq58m4RS1QQS8JE5xndzDFy2BvGU6y
GPU Power: 9x GTX 1070 + 6x GTX 1080

Avatar
StillBlue

Status: n/a
Joined: Tue, 06 Dec 2016
Posts: 64
Team:
Reputation: 0 Reputation
Offline
Mon, 11 Feb 2019 @ 09:50:49

Your just a tad quicker than anything I can achieve here. About 20x quicker in fact.

Thank you.


Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3213
Team: HashKiller
Reputation: 4165 Reputation
Offline
Mon, 11 Feb 2019 @ 11:13:41

CRACKED!!

3cc496869b6bb20185593b3c7449358e:a0bdcd6c5492:cc44631214af:NOWTV39BA7:BLCXFXMVPS


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 1JZGVq58m4RS1QQS8JE5xndzDFy2BvGU6y
GPU Power: 9x GTX 1070 + 6x GTX 1080

Avatar
StillBlue

Status: n/a
Joined: Tue, 06 Dec 2016
Posts: 64
Team:
Reputation: 0 Reputation
Offline
Mon, 11 Feb 2019 @ 11:34:36

Excellent. Confirmed and repped.

Thanks for that, and helping confirm the NOWTV is just a rebadged job.


Avatar
payknight

Status: Cracker
Joined: Wed, 13 Apr 2016
Posts: 610
Team: just4fun
Reputation: 361 Reputation
Offline
Mon, 11 Feb 2019 @ 11:37:42

blandyuk said:

Code:
Guess.Mask.......: ?2?2?2?2?2?2?2?2?2S [10]
Guess.Charset....: -1 Undefined, -2 NBPYVLMRXTCFWDSQ, -3 Undefined, -4 Undefined
Guess.Queue......: 1/1 (100.00%)
Speed.#3.........:   474.2 kH/s (160.19ms) @ Accel:16 Loops:1024 Thr:1024 Vec:1
Speed.#4.........:   473.9 kH/s (160.28ms) @ Accel:16 Loops:1024 Thr:1024 Vec:1
Speed.#5.........:   477.1 kH/s (157.57ms) @ Accel:16 Loops:1024 Thr:1024 Vec:1
Speed.#6.........:   473.9 kH/s (158.85ms) @ Accel:16 Loops:1024 Thr:1024 Vec:1
Speed.#7.........:   347.3 kH/s (341.00ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#8.........:   352.3 kH/s (323.05ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#9.........:   352.7 kH/s (330.90ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#10.........:   353.2 kH/s (328.12ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#11.........:   353.3 kH/s (323.87ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#12.........:   352.5 kH/s (326.67ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#13.........:   352.7 kH/s (326.38ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#14.........:   353.0 kH/s (333.03ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#*.........:  4716.1 kH/s

how 14 cards :o ?


+rep if i helped
BTC : 1PAyKniGHt7yyCb8HdsziTHBEFX6zkGSHz

Avatar
Rezza

Status: n/a
Joined: Sun, 07 Oct 2018
Posts: 40
Team:
Reputation: 0 Reputation
Offline
Mon, 11 Feb 2019 @ 11:47:01

StillBlue said:


Thanks for that, and helping confirm the NOWTV is just a rebadged job.

I was already convinced but that saved me wasting any electricity on it

We should thank $cI$$0r$ too for cracking one first
Very tragic ending for $cI$$0r$, but maybe a lesson for us all?


Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3213
Team: HashKiller
Reputation: 4165 Reputation
Offline
Mon, 11 Feb 2019 @ 11:53:43

Not 14 cards mate its 12 but PCIe slots start from #3 to #14.

I have updated the Wireless Default Keyspace page so it includes the NOWTV##### APs.


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 1JZGVq58m4RS1QQS8JE5xndzDFy2BvGU6y
GPU Power: 9x GTX 1070 + 6x GTX 1080

Avatar
gpuhash_me

Status: Trusted
Joined: Sun, 08 Nov 2015
Posts: 823
Team: gpuhash team
Reputation: 1597 Reputation
Online
Mon, 11 Feb 2019 @ 12:07:39

blandyuk said:

Not 14 cards mate its 12 but PCIe slots start from #3 to #14.

Have you experienced WPA hashrate slowdown with plain wordlists?
I assume you have 1x PCIe here and its bandwidth will be a bottleneck for 1080Ti


Head of cheap publicity department
Support, discounts, free offers for HK members
BTC: 1GPUHASHckzcL2fDXyGSc2WNqpFjJZbFaN

Avatar
payknight

Status: Cracker
Joined: Wed, 13 Apr 2016
Posts: 610
Team: just4fun
Reputation: 361 Reputation
Offline
Mon, 11 Feb 2019 @ 12:07:58

blandyuk said:

Not 14 cards mate its 12 but PCIe slots start from #3 to #14.

I have updated the Wireless Default Keyspace page so it includes the NOWTV##### APs.

right XD

what mobo as 12 slots in it ?


+rep if i helped
BTC : 1PAyKniGHt7yyCb8HdsziTHBEFX6zkGSHz

Avatar
dipeperon

Status: Member
Joined: Tue, 03 Apr 2018
Posts: 411
Team:
Reputation: 425 Reputation
Offline
Mon, 11 Feb 2019 @ 12:52:48

Rezza said:


Very tragic ending for $cI$$0r$, but maybe a lesson for us all?

What do you mean very tragic ending?


My haschat stuff (rules, scripts): https://github.com/theherp/Hashcat-stuff

Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3213
Team: HashKiller
Reputation: 4165 Reputation
Offline
Mon, 11 Feb 2019 @ 13:04:52

Asrock H110 Pro BTC+ has 13 x PCIe slots, 12 of which are 1x speed. Yes, with wordlists + rules, there is a bottleneck due to interface speed being 1x but brute-force is not affected.


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 1JZGVq58m4RS1QQS8JE5xndzDFy2BvGU6y
GPU Power: 9x GTX 1070 + 6x GTX 1080


28 Results - Page 1 of 1 -
1

We have a total of 197501 messages in 24432 topics.
We have a total of 21706 registered users.
Our newest registered member is Tyler630.