+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Misc (https://hashcat.net/forum/forum-15.html)
+--- Forum: User Contributions (https://hashcat.net/forum/forum-25.html)
+--- Thread: Keyspace List for WPA on Default Routers (/thread-6170.html)
Keyspace List for WPA on Default Routers - duhblow7 - 12-30-2016
I put this together from a few different sources. I haven't seen a thread like this on here yet but I may have missed it.
If you have a router not on this list let me know and I'll edit the post. If something may be wrong also let me know. Some of these links are dead but google cache is helpful. Most of this info was borrowed from the routerkeygenPC github project.
2WIREXXX-[0-9][len10]
3Wireless-Modem-XXXX-[0-9A-F][len8]
https://github.com/wpatoolkit/10-Hex-Generator
Alice-12345678-[0-9a-z][len24]
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/AliceGermanyKeygen.cpp
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/AliceItalyKeygen.cpp
https://wpacalculator.altervista.org/XL/Alice.php
Andared
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/AndaredKeygen.cpp
AOLBB-XXXXXX-[0-9A-Z][len8]
Arcadyan
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/ArcadyanKeygen.cpp
ArnetPirelli
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/ArnetPirelliKeygen.cpp
ATTXXX-[0-9][len10]
ATTXXXX-[0-9A-Z][len10]
ATTXXXXXXX-[0-9a-z+][len12]
Axtel
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/AxtelKeygen.cpp
belkin.xxx-[2-9a-f][len8]
https://github.com/wpatoolkit/8-Hex-Generator
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/BelkinKeygen.cpp
https://bitbucket.org/dudux/belkin4xx
https://github.com/Konsole512/Crippled
https://www.routerpwn.com/belkinwpa/
https://raw.githubusercontent.com/devttys0/wps/master/pingens/belkin/pingen.c
Belkin.XXXX-[0-9A-F][len8]
https://github.com/wpatoolkit/8-Hex-Generator
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/BelkinKeygen.cpp
https://bitbucket.org/dudux/belkin4xx
https://github.com/Konsole512/Crippled
https://www.routerpwn.com/belkinwpa/
https://raw.githubusercontent.com/devttys0/wps/master/pingens/belkin/pingen.c
belkin.xxxx-[2-9a-f][len8]
https://github.com/wpatoolkit/8-Hex-Generator
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/BelkinKeygen.cpp
https://bitbucket.org/dudux/belkin4xx
https://github.com/Konsole512/Crippled
https://www.routerpwn.com/belkinwpa/
https://raw.githubusercontent.com/devttys0/wps/master/pingens/belkin/pingen.c
Belkin_XXXXXX-[0-9A-F][len8]
https://github.com/wpatoolkit/8-Hex-Generator
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/BelkinKeygen.cpp
https://bitbucket.org/dudux/belkin4xx
https://github.com/Konsole512/Crippled
https://www.routerpwn.com/belkinwpa/
https://raw.githubusercontent.com/devttys0/wps/master/pingens/belkin/pingen.c
BELLXXX-[0-9A-F][len8]
https://github.com/wpatoolkit/10-Hex-Generator
BigPondXXXXXX-[0-9A-F][len10]
https://github.com/wpatoolkit/10-Hex-Generator
BrightBox-XXXXXX-[len8]
BTBusinessHub-XXX-[0-9][len10]
https://github.com/wpatoolkit/10-Hex-Generator
BTHomeHub2-XXXX-[2-9a-f][len10]
https://github.com/wpatoolkit/10-Hex-Generator
BTHomeHub-XXXX-[0-9a-f][len10]
https://github.com/wpatoolkit/10-Hex-Generator
https://wpacalculator.altervista.org/XL/BTHomeHub.php
https://www.gnucitizen.org/blog/default-key-algorithm-in-thomson-and-bt-home-hub-routers/
BTHub3-XXXX-[2-9a-f][len10]
https://github.com/wpatoolkit/10-Hex-Generator
BTHub4-XXXX-[2-9a-f][len10]
https://github.com/wpatoolkit/10-Hex-Generator
BTHub5-XXXX-[2-9a-f][len10]
https://github.com/wpatoolkit/10-Hex-Generator
CabovisaoSagem
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/CabovisaoSagemKeygen.cpp
CenturyLinkXXXX-[0-9a-f][len14]
Comtrend
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/ComtrendKeygen.cpp
Contattami
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/ConnKeygen.cpp
DDW12345-[DDW123]+[0-9A-F_len6]
DG123456-[DG1234]+[0-9A-F_len6]
Digicom_XXXX-[0-9A-Z][len8]
Discus
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/DiscusKeygen.cpp
https://raw.githubusercontent.com/RobertoEstrada/WLANAudit-Android/master/WLANAudit/src/main/java/es/glasspixel/wlanaudit/keyframework/DiscusKeyCalculator.java
DJAWEB_XXXXX-[0-9][len10]
Dlink
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/DlinkKeygen.cpp
https://wpacalculator.altervista.org/XL/DLink.php
https://www.devttys0.com/2014/10/reversing-d-links-wps-pin-algorithm/
https://raw.githubusercontent.com/devttys0/wps/master/pingens/dlink/pingen.py
https://lixei.me/codigo-fonte-wpa-dlink-php-c/
https://raw.githubusercontent.com/RobertoEstrada/WLANAudit-Android/master/WLANAudit/src/main/java/es/glasspixel/wlanaudit/keyframework/DlinkKeyCalculator.java
Domino-XXXX-[0-9A-F][len8]
https://github.com/wpatoolkit/10-Hex-Generator
E583X-XXXX-[0-9][len8]
E583X-XXXXX-[0-9A-F][len8]
https://github.com/wpatoolkit/10-Hex-Generator
EasyBox-XXXXXX-[0-9A-F][len9]
https://wpacalculator.altervista.org/XL/EasyBox.php
https://www.wardriving-forum.de/wiki/Standardpassw%C3%B6rter
https://www.patent-de.com/20081120/DE102007047320A1.html
https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130805-0_Vodafone_EasyBox_Default_WPS_PIN_Vulnerability_v10.txt
https://raw.githubusercontent.com/torstenfeld/EasyBoxWpaCalc/master/other_sources/easybox_keygen.sh
https://raw.githubusercontent.com/torstenfeld/EasyBoxWpaCalc/master/other_sources/easybox_keygen.bat
https://www.routerpwn.com/EasyBox/
EEBrightBox-XXXXXX-[word-word-word]
https://github.com/wpatoolkit/Word-word-word-Wordlist-Generator
Eircom
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/EircomKeygen.cpp
https://wpacalculator.altervista.org/XL/Eircom.php
ELTEX-XXXX
Fastweb
https://wpacalculator.altervista.org/XL/Fastweb.php
FRITZ!Box Fon WLAN XXXX-[0-9][len16]
HG824x
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/HG824xKeygen.cpp
HOME-XXXX(Cisco)-[0-9A-Z][len16]
HOME-XXXX(SMC)-[serial_len12]+[0-9A-F_len4]
HOME-XXXX-[0-9A-F][len16]
Huawei
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/HuaweiKeygen.cpp
https://websec.ca/blog/view/mac2wepkey_huawei
https://raw.githubusercontent.com/RobertoEstrada/WLANAudit-Android/master/WLANAudit/src/main/java/es/glasspixel/wlanaudit/keyframework/HWeiKeyCalculator.java
INFINITUMXXXX-[0-9][len10]
Infostrada
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/InfostradaKeygen.cpp
https://wpacalculator.altervista.org/XL/Infostrada.php
InterCable
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/InterCableKeygen.cpp
JAZZTEL
https://wpacalculator.altervista.org/XL/JAZZTEL.php
https://raw.githubusercontent.com/RobertoEstrada/WLANAudit-Android/master/WLANAudit/src/main/java/es/glasspixel/wlanaudit/keyframework/WLANXXXXKeyCalculator.java
Keenetic-XXXX-[a-zA-Z0-9][len8]
LinksysXXXXX-[0-9a-z][len10]
Livebox-XXXX
Maxcom
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/MaxcomKeygen.cpp
Megared
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/MegaredKeygen.cpp
MeoPirelli
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/MeoPirelliKeygen.cpp
MGTS_GPON_XXXX-[0-9a-f][len8]
https://github.com/wpatoolkit/10-Hex-Generator
mifi2-[0-9A-Z][len13]
MiFiXXXX XXX-[0-9][len11]
MobileWifi-XXXX-[0-9][len8]
NETGEARXX-[adj+noun+3digs]
https://github.com/wpatoolkit/Adj-Noun-Wordlist-Generator
NETIASPOT_XXXXXX-[0-9a-z][len12]
ONOXXXX-[0-9][len10]
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/OnoKeygen.cpp
OPTUS_XXXXX-[A-Z][len15]+[0-9][len5]
Orange-[0-9a-f][len8] or [0-9A-F][len12]
https://github.com/wpatoolkit/10-Hex-Generator
Orange-XXXX-[2345679ACEF][len8]
https://github.com/wpatoolkit/10-Hex-Generator
Ote
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/OteKeygen.cpp
OteBAUD
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/OteBAUDKeygen.cpp
OteHuawei
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/OteHuaweiKeygen.cpp
PBS
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/PBSKeygen.cpp
Pirelli
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/PirelliKeygen.cpp
https://packetstormsecurity.com/files/131834/Pirelli-Router-P.DG-A4001N-WPA-Key-Reverse-Engineering-Rev-2.html
https://ednolo.alumnos.upv.es/?p=1883
PlusnetWireless-XXXXXX-[0-9A-F][len10]
https://github.com/wpatoolkit/10-Hex-Generator
PRIMEHOME-XX-[0-9a-f][len8]
https://github.com/wpatoolkit/10-Hex-Generator
Ptv
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/PtvKeygen.cpp
ROSTELECOM_XXXX-[ACDEFGHJKMNPQRTUXY3467][len8]
SAGEMCOM_XXXX-[ACDEFGHJKMNPQRTUXY3467][len8]
SBG123456-[SBG1234]+[0-9A-F_len6]
Sitecom
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/SitecomKeygen.cpp
SKYXXXXX-[A-Z][len8]
https://github.com/wpatoolkit/Upper-Alpha-Keyspace-Reducer
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/SkyV1Keygen.cpp
Speedport500
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/Speedport500Keygen.cpp
SpeedTouchXXXXXX-[0-9A-F][len10]
https://wpacalculator.altervista.org/XL/SpeedTouch.php
https://www.nickkusters.com/en/services/thomson-speedtouch
https://www.md5this.com/thomson-speedtouch-crack.html
https://www.mentalpitstop.com/touchspeedcalc/calculate_speedtouch_default_wep_wpa_wpa2_password_by_ssid.html
https://klasseonline.aboehler.at/stuff/thomson/
https://amigdalo.tk/ST/
https://www.hakim.ws/st585/KevinDevine/
https://sodki.org/data/uploads/code/thomson.sh
https://github.com/wpatoolkit/10-Hex-Generator
TAKASHI-XXXXXX-[0-9A-F][len8]
TALKTALK-XXXXXX-[ABCDEFGHJKMNPQRTUVWXY346789][len8]
Technicolor-[0-9A-F][len10]
https://wpacalculator.altervista.org/XL/Technicolor.php
https://github.com/wpatoolkit/10-Hex-Generator
Tecom
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/TecomKeygen.cpp
Tele2Tu
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/TeletuKeygen.cpp
https://wpacalculator.altervista.org/XL/Tele2.php
Telsey
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/TelseyKeygen.cpp
TELUSXXXX-[0-9a-f][len10]
https://github.com/wpatoolkit/10-Hex-Generator
TelstraXXXXXX-[0-9A-F][len10]
https://github.com/wpatoolkit/10-Hex-Generator
TG123456-[TG1234]+[0-9A-F_len6]
ThomsonXXXXXX-[0-9A-F][len10]
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/ThomsonKeygen.cpp
https://github.com/wpatoolkit/10-Hex-Generator
TIM_PN51T_XXXX-[0-9][len8]
TNCAPXXXXXX-[0-9A-F][len10]
https://github.com/wpatoolkit/10-Hex-Generator
TPG-XXXX
TP-LINK_Pocket_XXXX_MMMMMM
TP-LINK_XXXXXX-[0-9A-F][len8]
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/TplinkKeygen.cpp
https://www.backtrack-linux.org/forums/showthread.php?t=62673
https://github.com/wpatoolkit/10-Hex-Generator
U12345678-[U123456]+[0-9A-F_len6]
UNITE-XXXX-[0-9][len8]
UPCXXXXXXX-[A-Z][len8]
https://github.com/wpatoolkit/Upper-Alpha-Keyspace-Reducer
https://raw.githubusercontent.com/sporkbomb/wifi-opener/master/upc/upc0wn.sh
Verizon
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/VerizonKeygen.cpp
https://wpacalculator.altervista.org/XL/Verizon.php
https://aruljohn.com/fios/
https://www.xkyle.com/verizon-fios-wireless-key-calculator/
https://gist.githubusercontent.com/Eleadon/780b46a73782a12b4454/raw/6ed3749792e170953e76592c7e7324eab102d69f/verizon_fios_wep_keygen.js
Verizon MIFIXXXX XXXX-[0-9][len11]
virginmediaXXXXXXX-[abcdefghjklmnpqrstuvwxyz][len8]
https://github.com/wpatoolkit/Lower-Alpha-Keyspace-Reducer
VirginMobile MiFiXXXX XXX-[0-9][len11]
VMXXXXXX-2G-[abcdefghjklmnpqrstuvwxyz][len8]
https://github.com/wpatoolkit/Lower-Alpha-Keyspace-Reducer
VMXXXXXX-5G-[abcdefghjklmnpqrstuvwxyz][len8]
https://github.com/wpatoolkit/Lower-Alpha-Keyspace-Reducer
WiFi-Arnet-XXXX(Pirelli)-[0-9a-z][len10]
WiFi-Arnet-XXXX-[0-9a-zA-Z][len13]
WifimediaR
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/WifimediaRKeygen.cpp
WLAN
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/Wlan2Keygen.cpp
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/Wlan6Keygen.cpp
https://wpacalculator.altervista.org/XL/WLAN.php
https://raw.githubusercontent.com/RobertoEstrada/WLANAudit-Android/master/WLANAudit/src/main/java/es/glasspixel/wlanaudit/keyframework/WLANXXXXKeyCalculator.java
https://raw.githubusercontent.com/RobertoEstrada/WLANAudit-Android/master/WLANAudit/src/main/java/es/glasspixel/wlanaudit/keyframework/WiFiXXXXXXKeyCalculator.java
WLAN1-XXXXXX-[0-9A-F][len10]
https://github.com/wpatoolkit/10-Hex-Generator
XXXXX-[0-9A-Z][len16]
ZyXELXXXXXX-[0-9A-Z][len13]
https://raw.githubusercontent.com/routerkeygen/routerkeygenPC/master/src/algorithms/ZyxelKeygen.cpp
RE: Keyspace List for WPA on Default Routers - kamsulla - 12-30-2016
wow thanks
RE: Keyspace List for WPA on Default Routers - TheBogeyman - 12-30-2016
Hi!
Thanks. If you have for Genexis BV? default SSSID is usualy from 9symbols, big letters and numbers
RE: Keyspace List for WPA on Default Routers - atom - 12-30-2016
Nice list, thanks
RE: Keyspace List for WPA on Default Routers - duhblow7 - 12-31-2016
(12-30-2016, 09:38 AM)TheBogeyman Wrote: Hi!
Thanks. If you have for Genexis BV? default SSSID is usualy from 9symbols, big letters and numbers
Can you give me some examples of the SSID and WPA passphrase and maybe we can narrow it down. I googled it and found a picture of the bottom of a Genexis router and it had this info:
SSID GNXADD30E
WPA 2NMMM7SZYXH9
WPS PIN 80445258
Genexis
SSID [0-9A-Z][len9]
WPA [0-9A-Z][len12]
RE: Keyspace List for WPA on Default Routers - c4p0ne - 12-31-2016
Man this is really convenient, truly. Thank you for this contribution.
RE: Keyspace List for WPA on Default Routers - TheBogeyman - 12-31-2016
(12-31-2016, 12:40 AM)duhblow7 Wrote:(12-30-2016, 09:38 AM)TheBogeyman Wrote: Hi!
Thanks. If you have for Genexis BV? default SSSID is usualy from 9symbols, big letters and numbers
Can you give me some examples of the SSID and WPA passphrase and maybe we can narrow it down. I googled it and found a picture of the bottom of a Genexis router and it had this info:
SSID GNXADD30E
WPA 2NMMM7SZYXH9
WPS PIN 80445258
Genexis
SSID [0-9A-Z][len9]
WPA [0-9A-Z][len12]
HI!
That is exactly what i was seeking for.
thx!
edit: for info
found few more WPA2 default pass:
4CSLH4QQHAXR
WJQH2H2DVZFX
2NMMM7SZYXH9
then possibility for faster search:
-1 ?u?d ?1?u?u?u?1?1?1?u?u?u?u?1
RE: Keyspace List for WPA on Default Routers - vom - 01-11-2017
FYI - For NETGEARXX networks, there's a thread here that has the word combinations already assembled into a dict. You just need to append the ?d?d?d 3 digits for the right side input.
https://hashcat.net/forum/thread-4463.html
RE: Keyspace List for WPA on Default Routers - Algreen - 01-11-2017
Nice release...appreciated the effort.
RE: Keyspace List for WPA on Default Routers - Excessive4e - 01-11-2017
Thanks for your effort!!!