SpeedPwn

SpeedPwn is a Ruby application that can generate a list of possible passwords for SpeedTouch/Thomson routers. BT Home hubs are not supported because they're not used here in The Netherlands.

Originally I wrote a Python script (which can be found in nostalgia/speedpwn.py) back in early 2009 to do this and I've used it over the years. After using it for almost 4 years I decided it was time I'd rewrite it in a decent way.

The algorithm used itself is nothing new and has been around since 2008. More information about this can be found on the following web pages:

• http://www.gnucitizen.org/blog/default-key-algorithm-in-thomson-and-bt-home-hub-routers/
• http://www.mentalpitstop.com/touchspeedcalc/calculate_speedtouch_default_wep_wpa_wpa2_password_by_ssid.html

In plain English the algorithm for the default passwords can be described as "Very dumb".

• Ruby 1.9.3 or newer
• OpenSSL

Install it from RubyGems:

gem install speedpwn

Unlike other projects this one is not signed in any way. I consider it more of a quick hobby/joke project and thus don't really want to bother with signing, checksums, etc. Install at your own risk.

Once installed, run it and pass the last 6 characters of the SSID:

speedpwn C28B9B

Generating the list of passwords can take a few minutes so go make some tea/coffee while you wait for it to complete.

All source code in this repository is licensed under the MIT license unless specified otherwise. A copy of this license can be found in the file "LICENSE" in the root directory of this repository.