Thanks for the clarification guys. I'am using a handshake but like cooper said it will take years. Unfortunately all Actiontec routers have wps disabled so although I would love to use reaver it wont work. I have heard of reaver pro taking advantage of wps in Actiontec routers with wps not enabled but it sounds to good to be true and I have yet to find any solid evidence of that on the net. I was thinking of telling crunch to ignore characters in sequence higher than 2 so that way instead of wasting time with AAAAAAAAAAAAAAA1 it can do AA%%%%%%%%%%%%%. But then comes the problem of AA22CCDD11FFGGHH I've been trying to figure out how to only get only 3 sets of consecutive numbers allowable per password this might decrease the success rate of the list but it still might work. Size isnt a issue now since i can pass though crunch to pyrit or hashcat but it still might be years. any thoughts as to how I could do this? Or is there a different approach?
