[Conch]

Hi HC. Good day.

I don't know how many people on this forum are from the UK.
But as I've experienced on other forums and through experience, there are some serious issues with TalkTalk ISP Routers/Access Points.
I don't have a TalkTalk AP so I can't test it personally, I try to stay White Hat lol, but I like to experiment.

Anyway..
It only happens on Stock APs, I tested Reaver on a TP-Link running on the TalkTalk ISP, and it went through the process fine.
However with Stock APs (TalkTalkXxXxX) XxX = The Digits in the ESSID.

The AP never locks out, it times out so no further PIN cracking can be done.
As I've read on other forums, PINs are based on the MAC Address.

Whenever you start Cracking the PIN on the stock Router, it detects the first common PIN as correct using extra verbosity (1234)
This is incorrect, and I've tried a mixture of PINs and it Validates them ALL.
So it's basically tricking Reaver into thinking all the first PINs, reaver runs through are correct?

I even used the verbosity with a PIN based on the MAC address (1054) and it turned out correct.
I tried cracking the second half of the PIN and it looped at 99% so it's not correct.

This was also awkward to do, due to timeouts.
I've tried multiple tools, Reaver 1.3 (Which is supposed to work on TalkTalk)
And "Bully" - To randomize PINs to prevent lock outs.

None of them worked.

I'm thinking it's either a firmware bug in the stock routers, or just a plan set up by the ISP themselves on the manufactured APs to prevent WPS PIN Cracking.

What do you guys think?
I hope there are some WiFi guys on this forum
I hope it's easy to understand.

Thanks all!
Kind regards,
Conch.