[Archived] Default Router WPA Keys - Keyspace Used

[bleez]

Hey folks, anybody figure out the keyspace for SSID's WIFIXXXXXX where "X" is uppercase letters & numbers? This seems to be the only one missing from this list.

 

[pasnger57]

Hey folks, anybody figure out the keyspace for SSID's WIFIXXXXXX where "X" is uppercase letters & numbers? This seems to be the only one missing from this list.

good luck dragon chaser

 

[Xkaper]

Hey Lads, anyone knows the stock keyspace for Eircom Wpa2 Routers? SSIDs like eirxxxxxxxx-2.4G? Thanks in advance.

 

[techtrip]

Hello all, this is my first post.

Can someone help me to understand how GPUHASH.ME cracked this technicolor router in less than 15 mins?

Type: WPA/WPA2 EAPOL
ESSID: DizzyCat
BSSID: 48:00:33:7F:2F:5E (Technicolor CH USA Inc.)
STMAC: 24:1B:7A:25:A2:85 (Apple, Inc.)
MIC: E0D45B1FD74D82D8A5DAFDD6709E8075
MIC: C42D84988C80E0DD47B45356A08B60D6
MIC: 0C29B208716048E08EEBC276E4302E9A

Attack configuration: Basic search
Priority: 0
Hide my ass: N

Recorded: 2019-07-20 04:58:58
Started: 2019-07-20 12:22:12
Finished: 2019-07-20 12:32:32 (< 15 min)

I thought Technicolor routers were HEX len. 10?

Thanks!

 

[jerry]

Can someone help me to understand how GPUHASH.ME cracked this technicolor router in less than 15 mins?

I thought Technicolor routers were HEX len. 10?

LOL, if you actually paid gpuhash, you would find the truth

 

[techtrip]

A lot of "MySpectrumWIFIxx" in my area using Motorola (Arris) routers. While I'm 'working' I'd like to make a reference for myself and others. I put my last post in the wrong place so hopefully this is where it's supposed to be. Sorry if some of these are already known.

Arris DG1670A
DG1670A?H?H?H?H?d?d or
DG1670A?H?H?H?H?H?H

Arris DG860A
DG860A?H?H?H?H?d?d or
DG860A?H?H?H?H?H?H

Arris TG1672G
TG1672G?H?H?H?H?d?d or
TG1672G?H?H?H?H?H?H

Arris TG852G
TG852G?H?H?H?H?d?d or
TG852G?H?H?H?H?H?H

Arris TG862G
TG862G?H?H?H?H?d?d or
TG852G?H?H?H?H?H?H

All these routers are compatable with "MySpectrumWiFiXX" SSIDS

 

[javier_tci]

Hi anyone help to know the Ralink pin wps:
00:E0:20:93:F2:15

Thanks in advance.

 

[Mordan]

Hi anyone help to know the Ralink pin wps:
00:E0:20:93:F2:15

these are 8 number
be sure enable first

 

[Admiral]

I NEED HANDSHAKE PLZ
BSSID: EC:56:23:45:AB:90
ESSID: Home
Security type: WPA2
WPS: version 1.0, configured
WSC Name: HuaweiAP
Device Model: Huawei

 

[Weedzor]

First post here. Swedish company named “Tele2” router manufacturer are Netgear
Edit: Tried uploading a picture but doesn’t seem to work.

SSID: Tele2Gateway028E
WPA-PSK: yz3r38yt

 

[$keyboardwarrior$]

jiofi [a-z,0-9] Len: 10

https://i0.wp.com/technofizi.net/wp-content/uploads/2018/02/jiofi-default.png?resize=528%2C362&ssl=1

@gpuhash_me please confirm about this?

 

[Ghostpt]

Hi,
can i found defaul password wifi for VM0725264 ?
Thanks for help!

 

[darrwish]

Hi,
can i found defaul password wifi for VM0725264 ?
Thanks for help!

Sure, it is in the list at the top of this thread

VMXXXXXXX [0-9a-zA-Z] Len:12

 

[Meltdown]

New Sky Q 2 router SR203

SSID changed from SKY and 5 uppercase hex to SKY and 5 uppercase and digits
e.g something like SKYL2HKI

Passphrase format [0-9a-zA-Z] Len:12

 

[Meltdown]

No more cracking them then :(

Might have to go and work at AMD Sunnyvale. I'm sure their P47 Racks would smash this in a reasonable time. But for the rest of us......

Even 1 Petaflop is not going to make much of a dent in this keyspace
if you do the math on it

 

[Meltdown]

That's only per rack. I'm more thinking it would crack the algorithm to create the code :)

I am sure they have much better things to use it for than piss around
cracking domestic routers

 

[Deleted member]

Observations about Humax residential modems keyspace

Popular in South-East Asia, I've noticed that earlier models which are still wildly in use..

Mac addresses beginning with A0:72:2C have an 8 digit default keyspace ?d?d?d?d?d?d?d?d

but upon browsing my cracked lists.. using 15 variations, I've noticed that the 4th char appears to be a fixed 0 (zero) ..

for example..

710(0)0089
716(0)1267
653(0)2928
653(0)0750
653(0)8077
851(0)4845
632(0)7025
022(0)0601
711(0)3617
024(0)3041
702(0)5508
653(0)5558
710(0)0974
710(0)1173
946(0)1965

too much of a coincidence.. you might agree

so this puts the keyspace down to 7 ..

i.e. ?d?d?d0?d?d?d?d

thx

 

[madonkey]

thanks for sharing this :-)

 

[OstrichEgg]

Anyone compile a list of all these for us?

 

[thanost]

Anyone compile a list of all these for us?

There used to be one as the first post in this thread, but it got lost in the migration and nobody
seems capable of fixing it

Try this one in the meantime

Keyspace List for WPA on Default Routers