Justice is truth in action.

Benjamin Disraeli

The truth has never been that close before. More and more people are using wireless. Take an action, use eTrace tools and services to catch criminals. Let there be justice.



Research activity:

Dictionary attack doubts:

People ask us if dictionary attack is enough to crack WLAN encryption. Everybody knows WPA/WPA2 passwords can be 63 characters long and can contain all keyboard characters including special symbols, lower and upper cases, numbers etc. It means there exist more than 100 to the power of 63 combinations. It gives 1,e+126.


Do we really need to check all the possible combinations? It would take centuries even on the strongest machines!
Statistics shows how people are lazy. They usually use passwords built from lower case letters (like monica). In some cases passwords are made of alphanumeric (Monica2001) or are just numeric characters (9112001). The following figures indicates these are around 90% of all passwords that all people use. The other cases such as 'Monica%$2001' are uncommon. Lets have a look at some numbers:


The statistics comes from 10 000 password which were stolen from Windows Live Hotmail service in 2009.


The list contained:
  • 10 028 entries from which 9 843 were valid passwords,
  • 8931 (90%) were unique passwords, which means 10% were recurring,
  • 30 characters long password was the longest password,
  • 1 character long was the shortest one.


Top 20 most common passwords:

1.123456 - 64
2.123456789 - 18
3.alejandra - 11
4.111111 - 10
5.alberto - 9
6.tequiero - 9
7.alejandro - 9
8.12345678 - 9
9.1234567 - 8
10. estrella - 7
11. iloveyou - 7
12. daniel - 7
13. 000000 - 7
14. roberto - 7
15. 654321 - 6
16. bonita - 6
17. sebastian - 6
18. beatriz - 6
19. mariposa - 5
20. america - 5


Password length distribution:

1 chars - 2 - 0 %
2 chars - 4 - 0 %
3 chars - 4 - 0 %
4 chars - 31 - 0 %
5 chars - 49 - 1 %
6 chars - 1946 - 22 %
7 chars - 1254 - 14 %
8 chars - 1838 - 21 %
9 chars - 1091 - 12 %
10 chars - 772 - 9 %
11 chars - 527 - 6 %
12 chars - 431 - 5 %
13 chars - 290 - 3 %
14 chars - 219 - 2 %
15 chars - 157 - 2 %
16 chars - 190 - 2 %
17 chars - 56 - 1 %
18 chars - 17 - 0 %
19 chars - 7 - 0 %
20 chars - 14 - 0 %
21 chars - 10 - 0 %
22 chars - 8 - 0 %
23 chars - 3 - 0 %
24 chars - 3 - 0 %
25 chars - 3 - 0 %
26 chars - 0 - 0 %
27 chars - 3 - 0 %
28 chars - 0 - 0 %
29 chars - 1 - 0 %
30 chars - 1 - 0 %


Passwords on the list?:

3,713 = 42 %; lower alpha passwords ('a' to 'z')
Example : monica

291 = 3 %; mixed case alpha passwords ('a' to 'z' and from 'A' to 'Z')
Example: Monica

1707 = 19 %; numeric passwords ('0' to '9')
Example: 9112001

2655 = 30 %; mixed alpha and numeric passwords ('a'-'z', 'A'-'Z' and '0'-'9')
Example: Monica2001

565 = 6 %; mixed alpha + numeric + other characters.
Example: Monica%$2001



All the statistics come from http://www.acunetix.com/blog/websecuritynews/statistics-from-10000-leaked-hotmail-passwords/, acunetix, Bogdan Calin, October 6, 2009


Essid statistics

SSIDTotalPercent
<no ssid>19417329.823%
linksys17361078.783%
default5395012.729%
NETGEAR4833072.445%
Belkin54g2250191.138%
Wireless1991411.007%
no_ssid1978771.001%
hpsetup1486050.751%
WLAN985760.498%
ACTIONTEC815960.412%
home777120.393%
DLINK762770.385%
<hidden ssid>722060.365%
Free Public WiFi546270.276%
smc481060.243%
MSHOME422200.213%
Motorola309300.156%
Philips WiFi307830.155%
SITECOM289320.146%
orange279220.141%
tsunami275520.139%
tmobile252040.127%
hhonors247690.125%
101245480.124%
orange12219480.111%
ZyXEL216680.109%
USR8054214850.108%
3Com209890.106%
linksys-g200810.101%
orange14195110.098%
Wayport_Access190430.096%
orange13168380.085%
Guest164110.083%
(null)139740.070%
SpeedStream135250.068%
Customer ID134420.068%
HomeNet127280.064%
attwifi126680.064%
Wireless Network121210.061%
ANY106550.053%
FRITZ!Box Fon WLAN 7170104870.053%
freephonie103470.052%
SST-PR-1102940.052%
ConnectionPoint98060.049%
WLAN-AP95430.048%
Office84890.042%
WaveLAN Network82780.041%
GlobalSuiteWireless81250.041%
USR546176400.038%
FRITZ!Box Fon WLAN 705072960.036%
GoldenTree72960.036%
pocwyg7swean72120.036%
AMD_IBSS71220.036%
Home Network70440.035%
Thomson68800.034%
airportthru66540.033%
Internet64640.032%
Gateway62210.031%
megahoc.v2262000.031%
eduroam61010.030%
pi07490509x0960780.030%
BTOpenzone60560.030%
pi07490509x60330.030%
<No current ssid>59910.030%
Free Internet Access58930.029%
concrete57980.029%
eurospot56300.028%
setup55840.028%
DYNEX55620.028%
WiFi55180.027%
DV201AM54730.027%
INTERMEC54340.027%
FRITZ!Box Fon WLAN 714154050.027%
MSFTWLAN53900.027%
G604T_WIRELESS53110.026%
Airport52800.026%
kabelinternet52770.026%
ibahn52350.026%
public51920.026%
51800.026%
PCX500051710.026%
Untitled50830.025%
HOMENETWORK50630.025%
Ethostream49650.025%
megahoc49010.024%
west48080.024%
test48070.024%
philips47780.024%
18847390.023%
NETWORK45580.023%
SMARTSIGHT44810.022%
Rebar44070.022%
home wireless43910.022%
dlink_wireless43150.021%
TP-LINK42920.021%
42870.021%
Topcom42690.021%
Neuf WiFi42080.021%
IU Wireless41670.021%
stayonline41600.021%
D-LINK41130.020%
188ALT41090.020%
mobile41030.020%
dd-wrt41010.020%
buffalo40650.020%
trendnet40300.020%
david40160.020%
mike39740.020%
@home39690.020%
Comcast39590.020%
FRITZ!Box SL WLAN39340.019%
hawking39250.019%
ADSL-WiFi38660.019%
john38290.019%
linksys138150.019%
Thuis38100.019%
Zoom37630.019%
Blitzz37380.018%
Private36800.018%
bestbuy36790.018%
ALICE-WLAN36340.018%
Print Server36030.018%
RGXLPQSNGBNYVRAK35820.018%
GDS VCI 0135410.017%
Speedport W 501V35380.017%
conexant35120.017%
House34710.017%
Belkin34660.017%
goesh34410.017%
MIT34190.017%
Netgear133960.017%
Chris33540.016%
arescom33430.016%
USR546233400.016%
router33150.016%
laquinta32790.016%
University of Washington32660.016%
7265332340.016%
megahoc.v2431540.015%
matrix31410.015%
Webstar31330.015%
home131270.015%
Cox-Hospitality30810.015%
workgroup30730.015%
mywlan30410.015%
megahoc.2130290.015%
sonicwall29750.015%
mynetwork29610.014%
HomeWireless29350.014%
home\wireless29350.014%
WLCM29300.014%
net29140.014%
Michael29020.014%
linksys228910.014%
USR910628820.014%
Verizon Wi-Fi28710.014%
wirelesslan28290.014%
NETGEAR_11g27960.014%
HomeRun27860.014%
steve27790.014%
holidayinn27670.013%
My Network27550.013%
Skynet27410.013%
DLinkVWR27000.013%
FRITZ!Box Fon WLAN26790.013%
HomeOffice26580.013%
IBM26370.013%
2WIRE63126030.013%
osuwireless25950.013%
bob25850.013%
Smith25670.012%
T-Mobile_T-Com25370.012%
swisscom25250.012%
PANERA25200.012%
Scott25190.012%
fanTM25000.012%
mark24960.012%
5ECUR3w3p5TOR324920.012%
James24750.012%
Harvard University24700.012%
Robert24680.012%
MOBILE-EAPSIM24630.012%
Wireless124540.012%
nomad524540.012%
TI-AR7WRD24520.012%
non-specified SSID !!24460.012%
MU-WIRELESS24340.012%
Ativa54g23740.012%
NESPOT23720.012%
My Wireless Network A23680.011%
flyingj23620.011%
13023510.011%
V150023390.011%
johnson23330.011%
Guestnet23290.011%
SiriCOMM22970.011%
visitor22960.011%
Virgin Broadband22760.011%
vpnator22740.011%
casa22380.011%
DSLWLANModem20022350.011%
Essid statistics come from wigle.net arkasha && bobzilla, data collected on 06.10.2010


Access points manufacturer statistics:

ManufacturerTotalPercent
Linksys268538413.586
D-Link13077096.616
Cisco11491915.814
Dell8879644.492
Netgear7944474.019
2wire4483172.268
Belkin4389992.221
Symbol2988371.511
Apple Computer2222671.124
Lucent1988581.006
Alpha Networks1977841.000
SMC1919970.971
Trend1841220.931
Intel1727290.873
Orinoco1651330.835
Askey1601020.810
Buffalo1457220.737
Agere1457170.737
Avaya1457170.737
Microsoft1172450.593
Proxim1136780.575
Airespace1113810.563
ANI1052720.532
3Com897980.454
Aruba766630.387
Yakumo717090.362
US Robotics684080.346
Senao681870.344
Intel Corporation676000.342
Apple498000.251
Zyxel480300.243
Repotec455090.230
Colubris435470.220
USRobotics431620.218
ASUSTek Computer426920.215
Compaq417310.211
Ambit Microsystems385370.194
Private373010.188
Accton Technology369910.187
Amit348740.176
Motorala Bc342140.173
Melco335670.169
Sercomm325390.164
Xavi Technology302530.153
Farallon Communications298830.151
3Com Europe298550.151
Solomon287680.145
Actiontec251500.127
Tropos249820.126
Usi239560.121
Sonicwall199920.101
Wistron NeWeb173420.087
Philips158630.080
Enterasys Networks137950.069
Hewlett-Packard130090.065
Compex129490.065
Cc&C117960.059
Edimax112970.057
Entrasys107370.054
Sweex84400.042
Micro-Star82260.041
Airvast77590.039
Gateway200072070.036
Smartbridge65260.033
Enterasys65240.033
Lexmark International64300.032
Compaq HP58600.029
Xircom58400.029
Nortel53160.026
Sychip50330.025
LeArtery49050.024
Cabletron47400.023
Hawking Technology46580.023
BreezeCOM44330.022
CNet Technology41350.020
VTech39430.019
GigaByte33150.016
SOHOware29670.015
Handlink25030.012
Sena24680.012
Rincon Networks23990.012
Sony23460.011
HP18410.009
Fujitsu16490.008
Tellus Group14290.007
IPOne10110.005
Addtron9910.005
Tellus9380.004
Ericsson9040.004
Ricoh7300.003
Tribe Computing5380.002
Surecom5180.002
Argus5000.002
Megadata4030.002
Locus2080.001
Netgear/Epigram1700.000
Xerox1640.000
OEM1060.000
Nexland510.000
Unigraph120.000
Cogent70.000
AP manufacturer statistics come from wigle.net arkasha && bobzilla, data collected on 06.10.2010
Copyright 2010 Wireless Evidence. All rights reserved.