Abdelali's Junkyard

Why is it so easy to hack WiFi passwords in Algeria

Spoiler : it's because households are stupid

A little bit of context

You see, in Algeria, many households use default or weak WiFi passwords, making them easy targets for hackers like myself.

Most households use routers provided by our ISPs (mainly Ooredoo and Algérie Télécom, I'll refer to the latter as AT next time).
AT sells Huawei and ZTE routers to their 4G clients, and if you are unlucky enough to get the ZTE one then you're in danger if you didn't change the default password. Of course, the same thing applies if you buy a Ooredoo router (Ooredoo is worse since they sell only ZTE routers).

What is wrong with ZTE routers

ZTE did the huge mistake of using a 8 character digits only password on their routers, which means that there are exactly 100 million possible passwords.

You might think that 100 million is a lot but in reality it's not that much for a brute force attack, let me explain how we crack WiFi passwords before we continue.

When a hacker wants to steal a WiFi password, they try to capture the handshake using their laptop or any device that is capable of doing that, after that they take that handshake and use a tool named aircrack-ng (which of course is meant for ethical purposes only) and give it the handshake with a wordlist.
Aircrack-ng then tries to match the hashes by trying the passwords one by one until it finds a match or goes to the end without finding anything, my laptop (a Lenovo ThinkPad L480) can try about 8000 passwords per second, and for 100 million passwords that would take about 3 hours and a half.
3 hours is not much for a hacker if at the end they get the password, and of course for it to take 3 hours it would need to be at the end of the list (generally it's password starting with later digits like 7, 8 or 9), but if the password is at the start of the list then it would take less than a minute to crack it.

Oh and let's not forget the people that use their birthdate as their password, I personally call that a rookie mistake because it makes the process way faster for us the hackes.

How to prevent this

So the easiest way to prevent this is to change your WiFi password to a name for example, or even a random string that is longer than 8 characters. You should also change the router's control panel password since it's also set to "admin" in every router, if you don't change it then a hacker can make your router completely useless by making it inaccessible or by blocking your devices from accessing it.

Back to Blog