Skip to content

Latest commit

 

History

History
448 lines (225 loc) · 8.87 KB

keyspace.md

File metadata and controls

448 lines (225 loc) · 8.87 KB

Sorted alphabetically by router ssid

  • 2WIREXXX - [0-9] - Len: 10

    • ?d?d?d?d?d?d?d?d?d?d
  • 3MobileWiFi - [0-9a-z] - Len: 8

    • -1 ?d?l ?1?1?1?1?1?1?1?1
  • 3WebCube#### - [0-9a-fA-F] - Len: 8

    • -1 ?h?H ?1?1?1?1?1?1?1?1
  • 3Wireless-Modem-XXXX - [0-9A-F] - Len: 8

    • ?H?H?H?H?H?H?H?H
  • Alice_XXXXXXXX - [0-9a-z] - Len: 24

    • -1 ?d?l ?1?1?1?1?1?1?1?1?1?1?1?1?1?1?1?1?1?1?1?1?1?1?1?1
  • AOLBB-XXXXXX - [0-9A-Z] - Len: 8

    • -1 ?d?u ?1?1?1?1?1?1?1?1
  • ATT### - [0-9] - Len: 10

    • ?d?d?d?d?d?d?d?d?d?d
  • ATTxxxx 0000 - [0-9A-Z] - Len: 10

    • -1 ?d?u ?1?1?1?1?1?1?1?1?1?1
  • ATTxxxxxxx - [a-z symbols] - Len: 12

    • -1 ?l?s ?1?1?1?1?1?1?1?1?1?1?1
  • belkin.xxx - [2-9a-f] - Len: 8

    • -1 23456789abcdef ?1?1?1?1?1?1?1?1
  • belkin.xxxx - [2-9a-f] - Len: 8

    • -1 23456789abcdef ?1?1?1?1?1?1?1?1
  • Belkin.XXXX - [0-9A-F] - Len: 8

    • ?H?H?H?H?H?H?H?H
  • Belkin_XXXXXX - [0-9A-F] - Len: 8

    • ?H?H?H?H?H?H?H?H
  • BELL### - [0-9A-F] - Len: 8

    • ?H?H?H?H?H?H?H?H
  • BELL#### - [0-9A-F] - Len: 10

    • ?H?H?H?H?H?H?H?H?H?H
  • BigPondXXXXXX - [0-9A-F] - Len: 10

    • ?H?H?H?H?H?H?H?H?H?H
  • BOLT!SUPER 4G-XXXX - [0-9 Last 4 of SSID] - Len: 8

    • ?d?d?d?d?H?H?H?H

      • (last 4 of ssid keyspace appears to be 0-9A-F)
  • BrightBox-XXXXXX - [word-word-word] - Len: 8

    • Dictionaries are located here
  • BTHomeHub1-XXXX - [0-9a-f] - Len: 10

    • ?h?h?h?h?h?h?h?h?h?h
  • BTHomeHub2-XXXX - [2-9a-f] - Len: 10

    • -1 23456789abcdef ?1?1?1?1?1?1?1?1?1?1
  • BTHub3 [2-9a-f] - Len: 10

    • -1 23456789abcdef ?1?1?1?1?1?1?1?1?1?1
  • BTHub4 - [2-9a-f] - Len: 10

    • -1 23456789abcdef ?1?1?1?1?1?1?1?1?1?1
  • BTHub5 - [2-9a-f] - Len: 10

    • -1 23456789abcdef ?1?1?1?1?1?1?1?1?1?1
  • BTHub6-XXXX - [0-9a-zA-Z] - Len: 10 or 12

    • -1 ?u?l?d ?1?1?1?1?1?1?1?1?1?1

    or

    • -1 ?u?l?d ?1?1?1?1?1?1?1?1?1?1?1?1
  • CenturyLinkXXXX - [0-9a-f] - Len: 14

    • ?h?h?h?h?h?h?h?h?h?h?h?h?h?h
  • Cisco - [0-9a-f] - Len: 26

    • ?h?h?h?h?h?h?h?h?h?h?h?h?h?h?h?h?h?h?h?h?h?h?h?h?h?h
  • Digicom_XXXX - [0-9A-Z] - Len: 8

    • -1 ?d?u ?1?1?1?1?1?1?1?1
  • DJAWEB_xxxxx - [0-9] - Len: 10

    • ?d?d?d?d?d?d?d?d?d?d
  • Domino-XXXX - [0-9A-F] - Len: 8

    • ?H?H?H?H?H?H?H?H
  • E583x-xxxx - [0-9] - Len: 8

    • ?d?d?d?d?d?d?d?d
  • E583x-xxxxx - [0-9A-F] - Len: 8

    • ?H?H?H?H?H?H?H?H
  • EasyBox 904 LTE - [0-9a-zA-Z] - Len: 9

    • -1 ?u?l?d ?1?1?1?1?1?1?1?1?1
  • EasyBox-###### - [0-9A-F] - Len: 9

    • ?H?H?H?H?H?H?H?H?H
  • EEBrightBox-XXXXXX - [word-word-word] - Len: Varies

    • Dictionaries are located here
  • FRITZ!Box Fon WLAN #### - [0-9] - Len: 16

    • ?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d
  • FrontierXXXX - [0-9] - Len: 10

    • ?d?d?d?d?d?d?d?d?d?d
  • Hitron - [0-9A-Z] - Len: 12

    • -1 ?d?u ?1?1?1?1?1?1?1?1?1?1?1?1
  • INFINITUM#### - [0-9] - Len: 10

    • ?d?d?d?d?d?d?d?d?d?d
  • iPhone 5 - [word + ?d?d?d?d] - Len: Varies

    • need dictionary
  • Keenetic-XXXX - [0-9a-zA-Z] - Len: 8

    • -1 ?u?l?d ?1?1?1?1?1?1?1?1
  • Linkem_XXXXXX - [0-9] - Len: 8

    • ?d?d?d?d?d?d?d?d
  • Livebox-XXXX [??-??] - Len: ??

    • Impossible
  • MEO-###### - [0-9A-F] - Len: 10

    • ?H?H?H?H?H?H?H?H?H?H
  • mifi2 - [0-9A-Z] - Len: 13

    • -1 ?d?u ?1?1?1?1?1?1?1?1?1?1?1?1?1
  • MobileWifi-xxxx - [0-9] - Len: 8

    • ?d?d?d?d?d?d?d?d
  • MyCharterWiFi-XX - [word + word + 1 or 3 Digits] - Len:Varies

    • -a 6 netgear-spectrum.txt ?d?d?d

    or

    • -a 6 netgear-spectrum.txt ?d

      • Dictionaries are located here
  • MySpectrumWiFi-XX - [word + word + 1 or 3 Digits] - Len:Varies

    • -a 6 netgear-spectrum.txt ?d?d?d

    or

    • -a 6 netgear-spectrum.txt ?d

      • Dictionaries are located here
  • MYWIFI (EE) - [MYWIFI + 4 numbers] - Len: 10

    • MYWIFI?d?d?d?d
  • NETGEARXX - [word + word + 3 Digits] - Len: Varies

    • -a 6 netgear-spectrum.txt ?d?d?d

    or

    • -a 6 netgear-spectrum.txt ?d

      • Dictionaries are located here
  • Netia-XXXXXX - [0-9a-f] - Len:13

    • ?h?h?h?h?h?h?h?h?h?h?h?h?h
  • ONOXXXX - [0-9] - Len: 10

    • ?d?d?d?d?d?d?d?d?d?d
  • Orange-#x#xx# - [0-9a-f] - Len: 8

    • ?h?h?h?h?h?h?h?h
  • Orange-XX#X## - [0-9A-F] - Len: 12

    • ?H?H?H?H?H?H?H?H?H?H?H?H
  • Orange-XXXX - [2345679ACEF] - Len: 8

    • -1 2345679ACEF ?1?1?1?1?1?1?1?1
  • PLDT - [PLDTWIFI + Last 5 of MAC] - Len: 13

    • PLDTWIFI?H?H?H?H?H
  • Plusnet Broadband UK - [0-9a-zA-Z] - Len: 64

    • -1 ?u?l?d Impossible
  • PlusnetWireless-XXXXXX - [0-9A-F] - Len: 10

    • ?H?H?H?H?H?H?H?H?H?H
  • PLUSNET-XXXXXX - [0-9a-f] - Len: 10 (Broken Algo)

    • ?h?h?h?h?h?h?h?h?h?h
  • Sitecom_XXXX - [0-9A-F] - Len: 8

    • ?H?H?H?H?H?H?H?H
  • SKYXXXXX (Sky Hub) - [A-Z] - Len: 8

    • ?u?u?u?u?u?u?u?u
  • SKYXXXXX (Sky Q Hub) - [BCDFLMNPQRSTVWXY] - Len: 10

    • -1 BCDFLMNPQRSTVWXY ?1?1?1?1?1?1?1?1?1X

CyberChef Recipe to determine the below from the SSID.

First hex value in SSID -> Last letter of PSK, X:

0 = P

1 = Q

2 = R

3 = S

4 = T

5 = N

6 = V

7 = W

8 = X

9 = Y

A = L

B = B

C = C

D = D

E = M

F = F

  • SmartRG - [0-9a-f] - Len: 10

    • ?h?h?h?h?h?h?h?h?h?h
  • SpectrumSetup-XX - [word + word + 1 or 3 Digits] - Len:Varies

    • -a 6 netgear-spectrum.txt ?d?d?d

    or

    • -a 6 netgear-spectrum.txt ?d

      • Dictionaries are located here
  • SpeedTouchXXXXXX - [0-9a-f] - Len: 10

    • ?h?h?h?h?h?h?h?h?h?h
  • TALKTALK-XXXXXX - [346789ABCDEFGHJKMNPQRTUVWXY] - Len: 8

    • -1 ABCDEFGHJKMNPQRTUVWXY346789 ?1?1?1?1?1?1?1?1
  • TDC-#### - [0-9a-f] - Len: 9

    • ?h?h?h?h?h?h?h?h?h
  • Tech_XXXXXXXX - [A-Z] - Len: 8

    • ?u?u?u?u?u?u?u?u
  • Technicolor-Router - [0-9A-F] - Len: 10

    • ?H?H?H?H?H?H?H?H?H?H
  • Telecom-XXXXXXXX - [??-??] - Len: ??

    • Currently Unknown
  • TelstraXXXXXX - [0-9A-F] - Len: 10

    • ?H?H?H?H?H?H?H?H?H?H
  • TELUSXXXX - [0-9a-f] - Len: 10

    • ?h?h?h?h?h?h?h?h?h?h
  • Thomson - [0-9A-F] - Len: 10

    • ?H?H?H?H?H?H?H?H?H?H
  • ThomsonXXXXXX - [0-9a-f] - Len: 10

    • ?h?h?h?h?h?h?h?h?h?h
  • TIM_PN51T_XXXX - [0-9] - Len: 8

    • ?d?d?d?d?d?d?d?d
  • TNCAP-XXXX - [0-9A-F] - Len: 10

    • ?H?H?H?H?H?H?H?H?H?H
  • TNCAPXXXXXX - [0-9A-F] - Len: 10

    • ?H?H?H?H?H?H?H?H?H?H
  • TP-LINK_#### - [0-9] - Len: 8

    • ?d?d?d?d?d?d?d?d
  • TP-LINK_###### - [0-9A-F] - Len: 8

    • ?H?H?H?H?H?H?H?H
  • TRENDnetXXX-###XXX - [### of SSID ?d?d?d?d?d?d?d?d] - Len: 11

    • ?d?d?d?H?H?H?H?H?H?H?H

      • (Last 8 char are the last 8 of serial number)

  • TRKASHI-###### - [?d?d######] - Len: 8

    • ?d?d######

      • (######= chars from ssid)
  • UNITE-XXXX - [0-9] - Len: 8

    • ?d?d?d?d?d?d?d?d
  • UPCXXXXXXX - [A-Z] - Len: 8

    • ?u?u?u?u?u?u?u?u
  • Verizon MIFIXXXX XXXX - [0-9] - Len: 11

    • ?d?d?d?d?d?d?d?d?d?d?d
  • Virgin Media - [abcdefghjklmnpqrstuvwxyz] - Len: 8

    • -1 abcdefghjklmnpqrstuvwxyz ?1?1?1?1?1?1?1?1
  • virginmediaXXXXXX - [abcdefghjklmnpqrstuvwxyz] - Len: 8

    • -1 abcdefghjklmnpqrstuvwxyz ?1?1?1?1?1?1?1?1
  • VirginMobile MiFiXXXX XXX - [0-9] - Len: 11

    • ?d?d?d?d?d?d?d?d?d?d?d
  • VMXXXXXXX - [0-9a-zA-Z] - Len:12

    • -1 ?u?l?d ?1?1?1?1?1?1?1?1?1?1?1?1
  • VMXXXXXXX-2G - [abcdefghjklmnpqrstuvwxyz] - Len: 8

    • -1 abcdefghjklmnpqrstuvwxyz ?1?1?1?1?1?1?1?1
  • VMXXXXXXX-5G - [abcdefghjklmnpqrstuvwxyz] - Len: 8

    • -1 abcdefghjklmnpqrstuvwxyz ?1?1?1?1?1?1?1?1
  • Vodaphone_XXXXXXXX - [0-9a-z] - Len: 15

    • -1 ?d?l ?1?1?1?1?1?1?1?1?1?1?1?1?1?1?1
  • WebCube#### - [0-9A-F] - Len: 8

    • ?H?H?H?H?H?H?H?H
  • WLAN1-XXXXXX - [0-9A-F] - Len: 10

    • ?H?H?H?H?H?H?H?H?H?H
  • ZyXELXXXXXX - [10:0-9A-F][13:0-9A-Z] - Len: 10 or 13

    • ?H?H?H?H?H?H?H?H?H?H

    or

    • -1 ?u?d ?1?1?1?1?1?1?1?1?1?1?1?1?1