[bigdangus]

So I captured 30 PMKID hashes from wifi APs around me. I used a custom wordlist and a numeric brute force of all 8 character digit combinations and all phone numbers in my region with hashcat 4x Nvidia RTX6000 on the cloud (linode). This only managed to crack 2/30 hashes.

What could I have done better? I'm thinking of running through the 150gb rockyou2024 wordlist. I was also gonna do an alphanumeric brute force of 8 characters but the estimate on that was 7000 years.

I don't want to have to resort to evil twin attacks. Any ideas?

[pasnger57]

this is the spaghetti tatic
you catputer a-lot of 1/2 handshaeks that my or my not contain an AUTH and ran a basic wordlist and Number sequnce and found a few stuck to the wall ... sound about right....

a better tatic it to KNOW The Device research ihow it my genrated its PSK...
befor you Run endles attackes agents soemt that my be more basic not in that feald search

Grpup Like device togehter...
identify keyspcae by device
from a atatack pattren for each data set

[d.bobr]

So I captured 30 PMKID hashes from wifi APs around me. I used a custom wordlist and a numeric brute force of all 8 character digit combinations and all phone numbers in my region with hashcat 4x Nvidia RTX6000 on the cloud (linode). This only managed to crack 2/30 hashes.

What could I have done better? I'm thinking of running through the 150gb rockyou2024 wordlist. I was also gonna do an alphanumeric brute force of 8 characters but the estimate on that was 7000 years.

I don't want to have to resort to evil twin attacks. Any ideas?

You can try in other ways (doesn’t have to be the evil twin).
Damn, I’m even curious to see what kind of networks those are, since 2 out of 30 turned out to be lucky ones.
If you can send them to me (preferably the .cap files right away), I’d be glad to take a look.