0

If one knows that a certain WPA2 CCMP encrypted network uses a password that is 16 characters and only numbers and uppercase letters (ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890) and has a handshake from that network does that make it possible to crack the password in a plausible amount of time?

I know it depends on the type of hardware used but generally what amount of an advantage could this information give you?

NULL
  • 503
  • 1
  • 5
  • 13
  • 1
    ... it means you know exactly how to craft your brute-force password library ... – schroeder Jan 26 '17 at 14:59
  • I know but does that information give me a significant time advantage like 7 days instead of 7 years? – NULL Jan 26 '17 at 15:02
  • 1
    Check out this question. It's basically the same one you're asking: http://security.stackexchange.com/questions/35278/bruteforce-on-10-characters-length-wpa2-password?rq=1 – schroeder Jan 26 '17 at 15:03
  • well, maybe 70 years instead of 7000 years, but yeah, that's the kind of advantage you get – schroeder Jan 26 '17 at 15:04

1 Answers1

2

It's a great advantage, It's no longer a full brute-force (all charsets and and lengths), but rather a specific brute-force (16 long and two basic charsets)

Your best shot would be to do a space-time-tradeoff pre-computing all the possible keys with tools like pyrit, then use OCLHashcat to use GPU to compare the keys with the MIC.

If you don't own a powerful GPU or don't want to skyrocket your electrical bill, you can also leverage the cloud to crack it yourself, renting some EC2 instances on Amazon, Azure, Bluemix, etc. for few bucks, or online cracking services like the long-time-dead Cloudcraker or OnlinceHashCrack, GPUHash.me etc.

I've already answered this: aircrack-ng fed with crunch taking ages

Community
  • 1
Azteca
  • 1,116
  • 7
  • 16
  • Could you ball park how long this might take using pyrit and GPU cracking on an average computer? I am just trying to see if its work my time. – NULL Jan 27 '17 at 17:17
  • @NULL Sorry man, tbh I don't have my workstation no more. Gifted the SDD I was using to my sibling's new rig and I haven't taken the time to get a new laptop/storage device. So.. I'm out of game as on now :( – Azteca Jan 27 '17 at 22:38