Hey everyone,
I was looking into the old UPC router vulnerabilities where default Wi-Fi passwords were generated using predictable algorithms based on SSID/MAC. It was possible to generate WPA2 keys for UPC1234567 networks with tools like upc_keys.c.
Now I’ve got a Ziggo SmartWifi Modem (Sagemcom F3896LG-ZG) and was wondering:
Is there any similar password generation algorithm for these newer Ziggo routers?
Has anyone analyzed default key generation patterns for these models yet?
Are WPS vulnerabilities (like Pixie Dust) still a thing on Ziggo firmware?
So far, it seems like the default passphrases are more randomized, but I’d be curious if anyone has tested cracking WPA2 handshakes from these models or reverse-engineered the key gen process.
Dudes X(twitter) @bl4sty who made upc_keys.c.
Cheers
I was looking into the old UPC router vulnerabilities where default Wi-Fi passwords were generated using predictable algorithms based on SSID/MAC. It was possible to generate WPA2 keys for UPC1234567 networks with tools like upc_keys.c.
Now I’ve got a Ziggo SmartWifi Modem (Sagemcom F3896LG-ZG) and was wondering:
Is there any similar password generation algorithm for these newer Ziggo routers?
Has anyone analyzed default key generation patterns for these models yet?
Are WPS vulnerabilities (like Pixie Dust) still a thing on Ziggo firmware?
So far, it seems like the default passphrases are more randomized, but I’d be curious if anyone has tested cracking WPA2 handshakes from these models or reverse-engineered the key gen process.
Dudes X(twitter) @bl4sty who made upc_keys.c.
Cheers


![[Image: Zippo-Sagemcom-F3896-LG-ZG.png]](https://i.ibb.co/3mCXtjHj/Zippo-Sagemcom-F3896-LG-ZG.png)
