[Archived] Default Router WPA Keys - Keyspace Used

K

karlb

Member
Feedback: 0 / 0 / 0
Joined
Dec 30, 2019
Messages
18
Reaction score
0
Credits
0
Hash-IT said:
This may be a long shot, but I have just looked at every SKY password I could find and I noticed that none of them start with an A.

Has anyone ever found a SKY WPA password starting with an A ?

Like A?u?u?u?u?u?u?u

Thanks.
Click to expand...

Just found one the other day password AFTDTSXU
 
H

Hash-IT

Active member
Feedback: 0 / 0 / 0
Joined
Dec 30, 2019
Messages
25,389
Reaction score
29
Credits
261
karlb said:
Just found one the other day password AFTDTSXU
Click to expand...

OK thanks for the information :)

Oh dear, that spoilt my plans LOL
 
8

8E3B635F

Active member
Feedback: 0 / 0 / 0
Joined
Dec 30, 2019
Messages
2,933
Reaction score
0
Credits
0
Found using Reaver.....

PlusnetWireless01xxxx [54EB3102EB2991134D0BC4F7B5A1A9C68A3ED2810040C14E35001D48C13E4449]


Are the BTHub5 the same as the other bthubs? 2-9 A-F
Rab
 
H

Hash-IT

Active member
Feedback: 0 / 0 / 0
Joined
Dec 30, 2019
Messages
25,389
Reaction score
29
Credits
261
user said:
Are the BTHub5 the same as the other bthubs? 2-9 A-F
Rab
Click to expand...

I think they are the same, however it would be nice to hear from someone who has one to confirm it.
 
8

8E3B635F

Active member
Feedback: 0 / 0 / 0
Joined
Dec 30, 2019
Messages
2,933
Reaction score
0
Credits
0
Thanks for that

Got one in my area so going to give it a bash

Rab
 
A

abdelhaq baallal

Active member
Feedback: 0 / 0 / 0
Joined
Dec 30, 2019
Messages
48
Reaction score
1
Credits
0
hi can any one help me i want pin of tncap2c57c2 and tncap694069 and tncap2c7248 ?????????? how can i hack tncap ?????? i am from morocco plz help me
 
blandyuk

blandyuk

Active member
Trusted
Contributor
VIP Member
Feedback: 0 / 0 / 0
Joined
Jul 6, 2011
Messages
18,627
Reaction score
500
Credits
11,512
test401 yes, 8 chars [A-Z].

Keyspace = (26 ^ 8) = 208,827,064,576
 
W

wkIzalwikOzEqpJcByMa

Active member
Feedback: 0 / 0 / 0
Joined
Dec 30, 2019
Messages
66
Reaction score
1
Credits
0
Here my contribution:

Orange-XXXX [2345679ACEF] Len: 8
UPCXXXXXXX [A-Z] Len: 8

Breaking Orange WPA passphrases by bruteforce (oclHashcat) [youtube]
 
W

wpacracknet

Member
Feedback: 0 / 0 / 0
Joined
Dec 30, 2019
Messages
18
Reaction score
0
Credits
0
Some TalkTalk details. Keyspace cut down

ABCDEFGHJKMNPQRTUVWXY346789

Not Used : ILOSZ 0125

TALKTALK-FD3980 84XBNFNF
HQXVRH44
CYRK3D4H
CYRYD6KK
QXWBCP8G
9CC4DAQC
EXT4PY4A
BYY3RAKJ
VGJTNPJC
KAGNJQM3
VXNATVTW
4NUBMHC3
TALKTALK-AD32E3 E3W8FGXD
UDBHAXQC
TALKTALK-774941 YM4EG3TV
DNUB7QVP
NJHKBET6
TALKTALK-E868FC 8GUF4RBB
TALKTALK-6F8C1C 69G7MAU8
TALKTALK-026DF2 9MN3KC3W
TALKTALK-576460 RJ9X87CA
TALKTALK-037DFB AMHKCETX
TALKTALK-059124 QQQHYRB7
QWVQGTVE
TALKTALK-819A13 QQBMHNU9
AUY76JVE
TALKTALK-81A4DB R6XPDFX3
NQJXKVYW
TALKTALK-02CB06 QMWQ84PE
CRG7KWH3
TALKTALK-FF913D MC4UMB8H
E9UTKA4F
TALKTALK-7BD856 ATXQXQHG
E489WYKG
 
H

Hash-IT

Active member
Feedback: 0 / 0 / 0
Joined
Dec 30, 2019
Messages
25,389
Reaction score
29
Credits
261
Hi wpacracknet and welcome to the forum.

If this proves to be accurate you will have made a significant contribution to this section.

Thanks very much for your post.
 
T

TheOneOnly

Member
Feedback: 0 / 0 / 0
Joined
Dec 30, 2019
Messages
6
Reaction score
0
Credits
0
Another TalkTalk WPA Key, V7MCBM9R

Seems to follow similar pattern as wpacracknet info.
 
W

wpacracknet

Member
Feedback: 0 / 0 / 0
Joined
Dec 30, 2019
Messages
18
Reaction score
0
Credits
0
Hash-IT said:
Hi wpacracknet and welcome to the forum.

If this proves to be accurate you will have made a significant contribution to this section.

Thanks very much for your post.
Click to expand...

Happy to share.

I'm also fairly positive Virgin Media do not use the letters i and o. Probably due to easy user mistakes with l and 0.

If anyone would like to confirm also?
 
blandyuk

blandyuk

Active member
Trusted
Contributor
VIP Member
Feedback: 0 / 0 / 0
Joined
Jul 6, 2011
Messages
18,627
Reaction score
500
Credits
11,512
Nice :) loving the reduced key-space on those, certainly helps a lot. I've updated my original post to reflect the updates above. I also had a private EE-Brightbox router WPA to crack and needless to say... my EE-Brightbox word-lists broke it ;) Would be nice to reduce them down if possible as I presume they use a limited 3, 4, 5 length word-set but it's knowning what they are.
 
H

Hash-IT

Active member
Feedback: 0 / 0 / 0
Joined
Dec 30, 2019
Messages
25,389
Reaction score
29
Credits
261
wpacracknet said:
Hash-IT said:
Hi wpacracknet and welcome to the forum.

If this proves to be accurate you will have made a significant contribution to this section.

Thanks very much for your post.
Click to expand...

Happy to share.

I'm also fairly positive Virgin Media do not use the letters i and o. Probably due to easy user mistakes with l and 0.

If anyone would like to confirm also?
Click to expand...

Yes that has been confirmed some time ago, I am not sure why it hasn't been updated on this thread before now. Thanks for pointing that out. I have just edited Blandy's post.

I guess we could do with a neater way to display these :)

Thanks again.
 
V

VTSTech

Active member
Feedback: 0 / 0 / 0
Joined
Dec 30, 2019
Messages
1,222
Reaction score
2
Credits
12
Most WiFi I've seen use their phone number ...
root@bt: for val in $( seq -w 0 9999 ); do echo 'NPANXX'$val >> NPANXX#.lst; done | more | aircrack-ng -a 2 *.pcap -w NPANXX#.lst
66sec per network to process. 157.36 k/s (w\ 1 NPA NXX)

Now. To expand.

Use http://www.localcallingguide.com

To find all numbers assigned to the local rate centre

Wordlist grows to 80,000 entries.

Estimated process time per network: 9 minutes (actual 8min50s w\ aircrack-ng)
 
You must log in or register to reply here.
Top