Keyspace List for WPA on Default Routers
(02-16-2025, 11:24 AM)lookin_for_peace Wrote: Hello,

I've been stuck for a while trying to understand the key generation of Compal CH7465LG (UPC/Vodafone Connect Box). I have gathered a bunch of keys from various places. What have I found:
- the keys are 12 characters long: most of them lower case except 1-3 upper and 1-3 digits, usually 2 upper and 2 digits
- similar characters are not used: 100% sure of: 0 1 9 i o l q O I
- I'm pretty sure the S/N and SSID of the router are used in the generation process but I don't know the algorithm

I've attached a file with the keys I've found online, it took a while.

Is anyone else trying to figure this out and is kind enough to share the findings, also could anyone give me a hint about the key generation algorithm, from what I know it's undisclosed.

Great start!
1) It would be helpful if you add the serial numbers and macs (and SSIDs) to this list as well, to be able to try some mathematics to see if anything lines up.
2) But from the data so far, '0DHILOiloq', are not used. You might want to double check password: mj6Frvnxwgxx to see if that's really a 'g' in there. It's the only 'g' in the whole data set, so could be a typo.
3) Do you have access to the firmware? These days, just looking at the passwords isn't enough anymore, and it requires reverse engineering the FW if they managed to leave the algorithm in there.
Reply


Messages In This Thread
RE: Keyspace List for WPA on Default Routers - by drsnooker - 02-16-2025, 08:11 PM