NETGEAR cap files

Discussion in 'Community Services' started by Demosthenes, 26 May 2014.

  1. Demosthenes

    Demosthenes Well-Known Member
    VIP

    Joined:
    16 Apr 2014
    Messages:
    83
    Likes Received:
    53
    I am not sure how many of you have had success at dictionary attacks on Netgear routers with the SSID like NETGEAR09, NETGEAR53, and so on. Another person compiled a wordlist I have that I helped with getting default WPA, WPA2 keys for.
    Before releasing said list I would like to try it against some more cap files. If anyone has any Netgear cap files, with the SSID like the ones above, please post them here so I can test them against the list.
    There are currently close to 7 million words on the list, and it takes me about 10min to run a GOOD cap file against it. Please make sure the cap file is good and contains data, otherwise we are both just wasting time.

    Thank you
     
    • Like Like x 1
  2. kevsamiga

    kevsamiga Well-Known Member
    VIP

    Joined:
    15 Sep 2013
    Messages:
    409
    Likes Received:
    126
    Success ? Quite a lot actually... ;-)

    In my experiences of NETGEARXX boxes they almost always have this format (below) as the default password (I have some .cap files collected)
    but I don't think it's necessary to upload these, as there is already a determined layout for the password unless you change the router defaults :

    <Dictionary word><no spaces><Dictionary word><nospaces><3 digits decimal number from 000 to 999> (not HEX)

    eg. example NETGEARXX passwords : pinkmonday056, jaggedmango576, kindpond322 etc.

    I would however be interested in any upload of this pre-complied dictionary for chewing through elcomsoft using the twin GPU's and quad core I have.

    ...where then the results can be found in a reasonable timeframe.

    I can give you the .cap files if you really want them (if I can find them anymore that is), but now I have revealed the exact format of how all the NETGEARXX default router passwords are constructed, I really don't see any point uploading more .cap files at this stage, since if your dictionary follows that same format, it should already be correct (and work).

    Regards.
     
    #2 kevsamiga, 27 May 2014
    Last edited: 27 May 2014
    • Like Like x 1
  3. Demosthenes

    Demosthenes Well-Known Member
    VIP

    Joined:
    16 Apr 2014
    Messages:
    83
    Likes Received:
    53
    Yes this is exactly how the list is made. I can run through the whole list, about 6.5 million words, in about 9 min with a i3 first gen processor and a single GTX560Ti card.
    This list is compiled of exact words found on Netgear routers with every combination of the first adjectives and second nouns, and of course from 000 to 999 at the end of each word.
    I would like to play with the cap files if you can find them. I will also upload this list for you when I get time, and the permission of the guy I compiled it with. This is just out of respect for him, as he did most of the work on it, I am sure you understand that.
     
    • Like Like x 1
  4. meknb

    meknb Mod
    Moderator Dev Team VIP

    Joined:
    2 Jun 2012
    Messages:
    702
    Likes Received:
    203
    I use this site for my wordlists http://wordnetcode.princeton.edu you can find noun and adjective's wordlists and use ulm to manipulate them.

    You might find some service provider's using these router's also ie surewest use's netgear router and keyspace. ie adj noun numbers.
     
    • Like Like x 1
  5. Demosthenes

    Demosthenes Well-Known Member
    VIP

    Joined:
    16 Apr 2014
    Messages:
    83
    Likes Received:
    53

    This method was tried on another site, and came up with a overwhelming size dictionary that had very low results. That is why we spent so much time collecting actual word combinations used and manipulating those to form new words, later to be found those were also used. The success rate is very high now, and I am continuing to add more words as they are found.
     
    • Like Like x 1
  6. Francis Wilson

    Francis Wilson Active Member

    Joined:
    5 May 2015
    Messages:
    12
    Likes Received:
    8
    My ISP uses a NETGEAR VMDG model and if the Wireless password is evqjhwgr would this be a adj noun number type?
     
    • Like Like x 1
  7. gearjunkie

    gearjunkie Well-Known Member
    VIP

    Joined:
    28 Aug 2014
    Messages:
    454
    Likes Received:
    481
    No, this looks like its just 8 lower case random characters.
     
    • Like Like x 1
  8. adeil

    adeil Active Member

    Joined:
    12 Feb 2015
    Messages:
    16
    Likes Received:
    9
    crack this handshake please
     

    Attached Files:

    • Like Like x 1

Share This Page

Loading...