TalkTalk's wi-fi hack advice is 'astonishing' I will look at updating the table shortly, busy morning at work today! This, of course, does not apply should standard dictionary words be used, or obvious replacements such as $ for S and 3 for E. Both help, but this Xfinity is a prime example of a password only using 2 types of digits but still being almost impossible to brute-force simply due to it's length. One point to note is that how hard a password is to crack tends to relate more to it's length, rather than it's complexity. Therefore not worth bothering trying to crack this one via Brute Force. Would take years to crack unless you have an amazing rig or a super computer. Therefore you are correct bingowings85, it would be (26+10)^16 = 7,958,661,109,946,400,884,391,936.Ĭorrection: On closer inspection, there does not appear to be any letters above F, which is pretty standard for a lot of router passwords. Uppercase = 26 letters, numbers = 10 (including 0) Xfinity on the other hand seems to be 16 chars hex. My sources are my own personal experiences, plus Please inform me of any inaccuracies or additional data you feel could be added. (sometimes use the device’s serial number as the default key!)įirst 3 digits in SSID (123 here) + 8 digits Obviously most of you will find the SSID / Password Format / Length columns the most useful. Google cache search.) For NETGEAR details, see here. For EE/Brightbox wordlist details, see here (appears to have been taken down. You will need to do your own maths for this, but it gives you a good idea of average crack times for a fairly standard £300 / $500 GPU.įor WPA2 with the GTX 970, my benchmarks with hashcat are Īnything marked as 'Never' and red will take more than a year to crack.Īnything amber is unknown or will require a word list. Please note that the figures shown in the far right column 'Time' are based on a Palit GTX 970 using oclHashCat. Hopefully some of you will find this table useful for ( legally and ethically) pentesting WiFi routers.

Hashkiller