Algorithm for generate default password

[brahim7]

One of the ISP in my country distributes a router ZTE H288A , this router comes with a default password that is a Mac address without : 




I want a code that converts Mac to a password
And how i add it to Router Keygen dictionary

[ZerBea]

Two options (there are more, but I prefer one of these):

1) hashcat -a 9 attack
$ cat hashfile.hc22000 | awk 'BEGIN { FS = "*" } ; {print $4 }' > test.list
$ hashcat -m 22000  -r hashcatmac.rule -a9  hashfile.hc22000 test.list


2) use hcxpsktool
$ hcxpsktool -c hashfile.hc22000 --maconly | hashcat -m 22000 hashfile.hc22000


Both options create also variations (e.g. NIC +n):
544617C475F0
544617C475F1
544617C475F2
544617C475F3
...
544617C475FF