Keyspace List for WPA on Default Routers
I haven't yet proven it beyond all doubt, but I've got good reason to believe that the default keyspace for BELLXXX SSIDs isn't actually 8 hexadecimal digits (16^8 or 4.29 billion combinations), but actually a reduced keyspace that omits the characters 0, 8 and B (presumably for readability) so it's only 13^8 or 815 million combinations.

I ran the reduced keyspace against 275 BELLXXX WPA handshakes and it cracked 210 of them, so pretty good odds they don't use all 16 hex digits.  Additionally, none of the uncracked handshakes have yet fallen to the full possible keyspace, but I haven't finished my testing yet.

Messages In This Thread
RE: Keyspace List for WPA on Default Routers - by pdo - 03-29-2017, 09:34 PM