Results 1 to 6 of 6

Thread: Wordlists??? - AT&T U-Verse and Charter Cable

  1. #1
    Join Date
    2015-Dec
    Posts
    17

    Wordlists??? - AT&T U-Verse and Charter Cable

    I think at least some of us know that AT&T uses a simple 10 digit numeric password for their U-Verse routers, does anyone have a wordlist for this that works well?

    I have also had Charter Cable service before and I have had their service before (still have the modem actually) - is there a wordlist for this also??

  2. #2
    Join Date
    2016-Jan
    Posts
    1
    The 10 digits from ATT are mostly phone numbers of the client, so you can use crunch in aircrack to brute-force the password, or you can generate the wordlist from 1000000000-9999999999 using crunch, but that would create a very big wordlist (>100 GB). A better solution is using oclHashcat and learn to use mask attack, so you can narrow down the success chance (For example: you can put in your area code as a known mask, thus you only have 7 more numbers to brute force and save you a lot of time). Another advantage is mask attack doesn't create wordlist, so this will save you some space on hard drive. About Charter wordlist, Charter is using the same default pass of their router manufacture, which is Netgear. So you can just use NetgearXX wordlist, which is available here in the forum, you just have to search for it.

  3. #3
    Join Date
    2015-Apr
    Posts
    29
    Quote Originally Posted by combat View Post
    I think at least some of us know that AT&T uses a simple 10 digit numeric password for their U-Verse routers, does anyone have a wordlist for this that works well?

    I have also had Charter Cable service before and I have had their service before (still have the modem actually) - is there a wordlist for this also??
    you can use CRUNCH to create your own 10 digit numeric wordlist.

  4. #4
    Join Date
    2015-Dec
    Posts
    17
    Quote Originally Posted by TheMantis View Post
    you can use CRUNCH to create your own 10 digit numeric wordlist.

    Working on it now, 106GB....it took me a while to get it to output what I was wanting exactly. I was having trouble with it for a little while so I thought maybe it would be easier to just download one.

  5. #5
    Join Date
    2015-Apr
    Posts
    29
    you can use crunch a pipe it to aircrack-ng if you like.
    crunch 10 10 1234567890 | aircrack-ng -b AP_MAC -w - *.cap

  6. #6
    Join Date
    2013-Jul
    Posts
    821
    Ref Diesel92 comments

    "you can narrow down the success chance (For example: you can put in your area code as a known mask"

    MTeams agrees and provides the following expansion:

    To implement this suggestion use the following command line:

    crunch 10 10 1234567890 -t 123@@@@@@@ | aircrack-ng -b AP_MAC -w - *.cap

    Where your area code is 123.

    or another way

    crunch 10 10 -f /usr/share/crunch/charset.lst numeric -t 123@@@@@@@ | aircrack-ng -b AP_MAC -w - *.cap

    Where -f is the path to the Crunch Character list.

    In either case you only need to check a 7 character variable string which can easily be done by even slow computers.

    If the key is not found then run the entire 10 length string:

    crunch 10 10 1234567890 | aircrack-ng -b AP_MAC -w - *.cap

    or

    crunch 10 10 -f /usr/share/crunch/charset.lst numeric | aircrack-ng -b AP_MAC -w - *.cap

    When running character strings lengths 8,9 and 10 it is best to precompute the files. When doing a passthru the crack speed is reduced as part of the computers resources are needed to first compute the variable with crunch. Greater then 10 characters and a precomputed file size becomes rather large leaving only passthru as a option.

    For those that really want to crack WPA thru brute force though, we suggest elcomsoft(windows 7 or 8) and two higher end video cards.

    For more on crunch see Crunch A Day With Tape. An excellant overview of crunch can be found there. You can learn how to stop and restart the attack and divide your files into smaller sizes.

    Musket Teams

Similar Threads

  1. Crunch Wordlists
    By kiddie in forum General Archive
    Replies: 8
    Last Post: 2016-09-26, 04:33
  2. 2.0 Wordlists
    By chemikul30 in forum General Archive
    Replies: 3
    Last Post: 2015-12-15, 14:23
  3. Wordlists
    By mmusket33 in forum Project Archive
    Replies: 0
    Last Post: 2015-11-01, 00:54
  4. Virgin Media reduced a-z wordlists
    By h4x0rm1k3 in forum Project Archive
    Replies: 3
    Last Post: 2015-10-27, 14:55

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •