Keyspace List for WPA on Default Routers
(10-16-2020, 09:45 AM)Red1337 Wrote: Been comparing 5286AC-FXN credentials.

There is a clear correlation between the first six digits of the MAC, and the first five digits of the S/N.

The 2Wire/Pace serial number has the form 'aabbcdeeeeee'. 
Here 'aa' is 2 digits possibly encoding the manufacture date (observed possible first digits include 1,2,3,4, and 9.) 
'bb' is the year ('12' for 2012, etc.), 'c' is almost always 1. 'd' varies, its exact meaning is unclear,but all observed 3801's have a '9' here, all observed 5268AC's have a 'N', and other devices vary.


For the 589 and 599, (and probably the bgw210s?) the serial is just the mac-1 converted to decimal

Messages In This Thread
RE: Keyspace List for WPA on Default Routers - by soxrok2212 - 11-03-2020, 10:46 AM