Keyspace List for WPA on Default Routers

[fart-box]

Thanks Frizz...

Sorry for not being here for a while, guy's. My log-in hasn't been working on this site for some reason. Today, I got lucky on my 4th attempt to log in.

You're both right about the BGW210-700. I've been saving this as "bonus information" for anyone brave enough to to use their brains, but drsnooker found it on his own and spilled the beans.

I've been cracking BGW210-700 passwords for well over a year now, without fail, using my NVG-599 key-gen.

And to answer drsnookers other question, you've got to put ALL of your keys into one pot and find ONE divisor that divides all of the keys.

It's worth noting that, in the NVG-599 key-gen, MrFancypants multiplies '2^32+2' by 'x', then floats the result, thus preserving and maintaining any fractions that might be produced. Yet, in the NVG-589 key-gen, MrFancypants multiplies '465661287.5245797' by 'x', then uses the resulting integer (ignoring the fraction) as the key to build the password.

[samlak]

Looks like ATT has been using a BGW210-700 recently with a similar ESSID as the others. Do we know anything about that default password?
From ebay sales it looks like the default password look similar to those of the NVG599 and uses the same 37 characterset.

Signed up just to share my experience. I was able to generate the correct key for BGW210-700 using the 599 and pipe it through hashcat and a GTX 1080. Worked on multiple devices, average time is ~90 mins at ~350-400 kH/s.

I didn't think these were crackable until doing research, finding this thread and other resources. I have been able to crack 100% of the ATT******* networks I've found which is blowing my mind a little.

I tried several ATT pace routers but not successful.

[fart-box]

I tried several ATT pace routers but not successful.

That's because ARRIS makes the BGW210-700 routers, not Pace.