Keyspace List for WPA on Default Routers
#1
I put this together from a few different sources.  I haven't seen a thread like this on here yet but I may have missed it.

If you have a router not on this list let me know and I'll edit the post.  If something may be wrong also let me know.  Some of these links are dead but google cache is helpful.  Most of this info was borrowed from the routerkeygenPC github project.

2WIREXXX-[0-9][len10]    
    
3Wireless-Modem-XXXX-[0-9A-F][len8]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
Alice-12345678-[0-9a-z][len24]    
    https://raw.githubusercontent.com/router...Keygen.cpp
    https://raw.githubusercontent.com/router...Keygen.cpp
    http://wpacalculator.altervista.org/XL/Alice.php
    
Andared    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
AOLBB-XXXXXX-[0-9A-Z][len8]    
    
Arcadyan    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
ArnetPirelli    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
ATTXXX-[0-9][len10]    
    
ATTXXXX-[0-9A-Z][len10]    
    
ATTXXXXXXX-[0-9a-z+][len12]    
    
Axtel    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
belkin.xxx-[2-9a-f][len8]    
    https://github.com/wpatoolkit/8-Hex-Generator
    https://raw.githubusercontent.com/router...Keygen.cpp
    https://bitbucket.org/dudux/belkin4xx
    https://github.com/Konsole512/Crippled
    http://www.routerpwn.com/belkinwpa/
    https://raw.githubusercontent.com/devtty...n/pingen.c
    
Belkin.XXXX-[0-9A-F][len8]    
    https://github.com/wpatoolkit/8-Hex-Generator
    https://raw.githubusercontent.com/router...Keygen.cpp
    https://bitbucket.org/dudux/belkin4xx
    https://github.com/Konsole512/Crippled
    http://www.routerpwn.com/belkinwpa/
    https://raw.githubusercontent.com/devtty...n/pingen.c
    
belkin.xxxx-[2-9a-f][len8]    
    https://github.com/wpatoolkit/8-Hex-Generator
    https://raw.githubusercontent.com/router...Keygen.cpp
    https://bitbucket.org/dudux/belkin4xx
    https://github.com/Konsole512/Crippled
    http://www.routerpwn.com/belkinwpa/
    https://raw.githubusercontent.com/devtty...n/pingen.c
    
Belkin_XXXXXX-[0-9A-F][len8]    
    https://github.com/wpatoolkit/8-Hex-Generator
    https://raw.githubusercontent.com/router...Keygen.cpp
    https://bitbucket.org/dudux/belkin4xx
    https://github.com/Konsole512/Crippled
    http://www.routerpwn.com/belkinwpa/
    https://raw.githubusercontent.com/devtty...n/pingen.c
    
BELLXXX-[0-9A-F][len8]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
BigPondXXXXXX-[0-9A-F][len10]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
BrightBox-XXXXXX-[len8]    
    
BTBusinessHub-XXX-[0-9][len10]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
BTHomeHub2-XXXX-[2-9a-f][len10]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
BTHomeHub-XXXX-[0-9a-f][len10]    
    https://github.com/wpatoolkit/10-Hex-Generator
    http://wpacalculator.altervista.org/XL/BTHomeHub.php
    http://www.gnucitizen.org/blog/default-k...b-routers/
    
BTHub3-XXXX-[2-9a-f][len10]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
BTHub4-XXXX-[2-9a-f][len10]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
BTHub5-XXXX-[2-9a-f][len10]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
CabovisaoSagem    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
CenturyLinkXXXX-[0-9a-f][len14]    
    
Comtrend    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
Contattami    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
DDW12345-[DDW123]+[0-9A-F_len6]    
    
DG123456-[DG1234]+[0-9A-F_len6]    
    
Digicom_XXXX-[0-9A-Z][len8]    
    
Discus    
    https://raw.githubusercontent.com/router...Keygen.cpp
    https://raw.githubusercontent.com/Robert...lator.java
    
DJAWEB_XXXXX-[0-9][len10]    
    
Dlink    
    https://raw.githubusercontent.com/router...Keygen.cpp
    http://wpacalculator.altervista.org/XL/DLink.php
    http://www.devttys0.com/2014/10/reversin...algorithm/
    https://raw.githubusercontent.com/devtty.../pingen.py
    http://lixei.me/codigo-fonte-wpa-dlink-php-c/
    https://raw.githubusercontent.com/Robert...lator.java
    
Domino-XXXX-[0-9A-F][len8]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
E583X-XXXX-[0-9][len8]    
    
E583X-XXXXX-[0-9A-F][len8]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
EasyBox-XXXXXX-[0-9A-F][len9]    
    http://wpacalculator.altervista.org/XL/EasyBox.php
    http://www.wardriving-forum.de/wiki/Stan...%C3%B6rter
    http://www.patent-de.com/20081120/DE102007047320A1.html
    https://www.sec-consult.com/fxdata/secco...ty_v10.txt
    https://raw.githubusercontent.com/torste..._keygen.sh
    https://raw.githubusercontent.com/torste...keygen.bat
    http://www.routerpwn.com/EasyBox/
    
EEBrightBox-XXXXXX-[word-word-word]    
    https://github.com/wpatoolkit/Word-word-...-Generator
    
Eircom    
    https://raw.githubusercontent.com/router...Keygen.cpp
    http://wpacalculator.altervista.org/XL/Eircom.php
    
ELTEX-XXXX    
    
Fastweb    
    http://wpacalculator.altervista.org/XL/Fastweb.php
    
FRITZ!Box Fon WLAN XXXX-[0-9][len16]    
    
HG824x    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
HOME-XXXX(Cisco)-[0-9A-Z][len16]    
    
HOME-XXXX(SMC)-[serial_len12]+[0-9A-F_len4]    
    
HOME-XXXX-[0-9A-F][len16]    
    
Huawei    
    https://raw.githubusercontent.com/router...Keygen.cpp
    http://websec.ca/blog/view/mac2wepkey_huawei
    https://raw.githubusercontent.com/Robert...lator.java
    
INFINITUMXXXX-[0-9][len10]    
    
Infostrada    
    https://raw.githubusercontent.com/router...Keygen.cpp
    http://wpacalculator.altervista.org/XL/Infostrada.php
    
InterCable    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
JAZZTEL    
    http://wpacalculator.altervista.org/XL/JAZZTEL.php
    https://raw.githubusercontent.com/Robert...lator.java
    
Keenetic-XXXX-[a-zA-Z0-9][len8]    
    
LinksysXXXXX-[0-9a-z][len10]    
    
Livebox-XXXX    
    
Maxcom    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
Megared    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
MeoPirelli    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
MGTS_GPON_XXXX-[0-9a-f][len8]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
mifi2-[0-9A-Z][len13]    
    
MiFiXXXX XXX-[0-9][len11]    
    
MobileWifi-XXXX-[0-9][len8]    
    
NETGEARXX-[adj+noun+3digs]    
    https://github.com/wpatoolkit/Adj-Noun-W...-Generator
    
NETIASPOT_XXXXXX-[0-9a-z][len12]    
    
ONOXXXX-[0-9][len10]    
    https://raw.githubusercontent.com/router...Keygen.cpp

OPTUS_XXXXX-[A-Z][len15]+[0-9][len5]
    
Orange-[0-9a-f][len8] or [0-9A-F][len12]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
Orange-XXXX-[2345679ACEF][len8]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
Ote    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
OteBAUD    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
OteHuawei    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
PBS    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
Pirelli    
    https://raw.githubusercontent.com/router...Keygen.cpp
    https://packetstormsecurity.com/files/13...Rev-2.html
    http://ednolo.alumnos.upv.es/?p=1883
    
PlusnetWireless-XXXXXX-[0-9A-F][len10]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
PRIMEHOME-XX-[0-9a-f][len8]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
Ptv    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
ROSTELECOM_XXXX-[ACDEFGHJKMNPQRTUXY3467][len8]    
    
SAGEMCOM_XXXX-[ACDEFGHJKMNPQRTUXY3467][len8]    
    
SBG123456-[SBG1234]+[0-9A-F_len6]    
    
Sitecom    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
SKYXXXXX-[A-Z][len8]    
    https://github.com/wpatoolkit/Upper-Alph...ce-Reducer
    https://raw.githubusercontent.com/router...Keygen.cpp
    
Speedport500    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
SpeedTouchXXXXXX-[0-9A-F][len10]    
    http://wpacalculator.altervista.org/XL/SpeedTouch.php
    http://www.nickkusters.com/en/services/t...speedtouch
    http://www.md5this.com/thomson-speedtouch-crack.html
    http://www.mentalpitstop.com/touchspeedc..._ssid.html
    http://klasseonline.aboehler.at/stuff/thomson/
    http://amigdalo.tk/ST/
    http://www.hakim.ws/st585/KevinDevine/
    http://sodki.org/data/uploads/code/thomson.sh
    https://github.com/wpatoolkit/10-Hex-Generator
    
TAKASHI-XXXXXX-[0-9A-F][len8]    
    
TALKTALK-XXXXXX-[ABCDEFGHJKMNPQRTUVWXY346789][len8]    
    
Technicolor-[0-9A-F][len10]    
    http://wpacalculator.altervista.org/XL/Technicolor.php
    https://github.com/wpatoolkit/10-Hex-Generator
    
Tecom    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
Tele2Tu    
    https://raw.githubusercontent.com/router...Keygen.cpp
    http://wpacalculator.altervista.org/XL/Tele2.php
    
Telsey    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
TELUSXXXX-[0-9a-f][len10]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
TelstraXXXXXX-[0-9A-F][len10]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
TG123456-[TG1234]+[0-9A-F_len6]    
    
ThomsonXXXXXX-[0-9A-F][len10]    
    https://raw.githubusercontent.com/router...Keygen.cpp
    https://github.com/wpatoolkit/10-Hex-Generator
    
TIM_PN51T_XXXX-[0-9][len8]    
    
TNCAPXXXXXX-[0-9A-F][len10]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
TPG-XXXX    
    
TP-LINK_Pocket_XXXX_MMMMMM    
    
TP-LINK_XXXXXX-[0-9A-F][len8]    
    https://raw.githubusercontent.com/router...Keygen.cpp
    http://www.backtrack-linux.org/forums/sh...hp?t=62673
    https://github.com/wpatoolkit/10-Hex-Generator
    
U12345678-[U123456]+[0-9A-F_len6]    
    
UNITE-XXXX-[0-9][len8]    
    
UPCXXXXXXX-[A-Z][len8]    
    https://github.com/wpatoolkit/Upper-Alph...ce-Reducer
    https://raw.githubusercontent.com/sporkb.../upc0wn.sh
    
Verizon    
    https://raw.githubusercontent.com/router...Keygen.cpp
    http://wpacalculator.altervista.org/XL/Verizon.php
    http://aruljohn.com/fios/
    http://www.xkyle.com/verizon-fios-wirele...alculator/
    https://gist.githubusercontent.com/Elead..._keygen.js
    
Verizon MIFIXXXX XXXX-[0-9][len11]    
    
virginmediaXXXXXXX-[abcdefghjklmnpqrstuvwxyz][len8]    
    https://github.com/wpatoolkit/Lower-Alph...ce-Reducer
    
VirginMobile MiFiXXXX XXX-[0-9][len11]    
    
VMXXXXXX-2G-[abcdefghjklmnpqrstuvwxyz][len8]    
    https://github.com/wpatoolkit/Lower-Alph...ce-Reducer
    
VMXXXXXX-5G-[abcdefghjklmnpqrstuvwxyz][len8]    
    https://github.com/wpatoolkit/Lower-Alph...ce-Reducer
    
WiFi-Arnet-XXXX(Pirelli)-[0-9a-z][len10]    
    
WiFi-Arnet-XXXX-[0-9a-zA-Z][len13]    
    
WifimediaR    
    https://raw.githubusercontent.com/router...Keygen.cpp
    
WLAN    
    https://raw.githubusercontent.com/router...Keygen.cpp
    https://raw.githubusercontent.com/router...Keygen.cpp
    http://wpacalculator.altervista.org/XL/WLAN.php
    https://raw.githubusercontent.com/Robert...lator.java
    https://raw.githubusercontent.com/Robert...lator.java
    
WLAN1-XXXXXX-[0-9A-F][len10]    
    https://github.com/wpatoolkit/10-Hex-Generator
    
XXXXX-[0-9A-Z][len16]    
    
ZyXELXXXXXX-[0-9A-Z][len13]    
    https://raw.githubusercontent.com/router...Keygen.cpp
Reply
#2
wow thanks
Reply
#3
Hi!
Thanks. If you have for Genexis BV? default SSSID is usualy from 9symbols, big letters and numbers
Reply
#4
Nice list, thanks
Reply
#5
(12-30-2016, 09:38 AM)TheBogeyman Wrote: Hi!
Thanks.  If you have for Genexis BV?  default SSSID is usualy from 9symbols,  big letters and numbers

Can you give me some examples of the SSID and WPA passphrase and maybe we can narrow it down.  I googled it and found a picture of the bottom of a Genexis router and it had this info:

SSID GNXADD30E
WPA 2NMMM7SZYXH9
WPS PIN 80445258



Genexis
SSID [0-9A-Z][len9]
WPA [0-9A-Z][len12]
Reply
#6
Thumbs Up 
Man this is really convenient, truly. Thank you for this contribution.
Reply
#7
(12-31-2016, 12:40 AM)duhblow7 Wrote:
(12-30-2016, 09:38 AM)TheBogeyman Wrote: Hi!
Thanks.  If you have for Genexis BV?  default SSSID is usualy from 9symbols,  big letters and numbers

Can you give me some examples of the SSID and WPA passphrase and maybe we can narrow it down.  I googled it and found a picture of the bottom of a Genexis router and it had this info:

SSID GNXADD30E
WPA 2NMMM7SZYXH9
WPS PIN 80445258



Genexis
SSID [0-9A-Z][len9]
WPA [0-9A-Z][len12]

HI!

That is exactly what i was seeking for.
thx!

edit: for info
found few more WPA2 default pass:
4CSLH4QQHAXR
WJQH2H2DVZFX
2NMMM7SZYXH9

then possibility for faster search:
-1 ?u?d ?1?u?u?u?1?1?1?u?u?u?u?1
Reply
#8
FYI - For NETGEARXX networks, there's a thread here that has the word combinations already assembled into a dict.  You just need to append the ?d?d?d 3 digits for the right side input.

https://hashcat.net/forum/thread-4463.html
Reply
#9
Nice release...appreciated the effort. Smile
Reply
#10
Thanks for your effort!!!
Reply