Crunch wordlist sizes WPA

[pentest09]

Hi all,

I have a few wpa routers that need auditing and know the setup (ie) 8 characters

and have a few to play around with I also have a few default WPA keys that are not able to be changed

(ie) BTNYBYPU
HAIIAUEO
etc.

now heres wot im asking more of confirmation really.

Running the command below:

#./crunch 8 8 ABCDEFGHIJKLMNOPQRSTUVWXYZ | cowpatty -f - -s <essid> -r /path/to/cap/file.cap

will run without writing to disk and pipe through cowpatty but will take ages.

Also if run as a wordlist gen only the file will take up 125 gb approx.
#./crunch 8 8 ABCDEFGHIJKLMNOPQRSTUVWXYZ -o media:/160gb_drive etc.

Am i correct in the fact that if able to allocate a spare drive to handle the output for the 125 gb file it will have ALL combos for the keys for the routers above including the ones listed.

If so, it will render the security on these routers (all) as breakable with the said wordlist.

Please advise and help me to confirm this. They will most probably be broken down into smaller lists and are there any ways to reduce the size.

Kind Regards
Dee

[comaX]

Hi, instead of cowpatty, you can pipe it to aircrack-ng which is faster, I believe.
If you have a whole drive you can write to it and then use cowpatty or aircrack as the file continues to grow bigger but I don't believe it will be any faster.

Am i correct in the fact that if able to allocate a spare drive to handle the output for the 125 gb file it will have ALL combos for the keys for the routers above including the ones listed.

I believe you are. If you are sure about the used charset, there is no reason the needed key isn't in it !

[azboy]

my 6-core intel i7 gets about 300 PMK/s with cowpatty. that'll take 22 years to go thru the entire 8 char a-z key space. you will need some type of GPU setup to do this faster. ATI cards + pyrit + calpp seems to be the fastest setup.