Hey thanks for the replys guys!

Yea that what I figured, Check the router model or AP name etc and google a common wordlist based on that make/model for the default wifi passwords supplied. But most people set custom WPA/WPA2 passwords. But I couldnt find much word lists. Didnt look very hard though!

Ive tried reaver, and get lots of errors, Im guessing these are timeouts due to too many incorrect auth requests etc. It tries the same pin like 20 times, then moves to the next.

Ive managed to get a few WAP2 deatuh handshakes but thats where I get stuck, I got a 12Gb worklist and tried to crack the handshake but it went for like 4 days lol (guessing based on the size of the wordlist.) maybe try more specific wordlists.

The questions I keep asking, is are these methods up to date with todays technology? Is the security moving faster then these tools we use in Kali etc? like aircrack-ng?

For example, I tried a deauth on a rather new vodafone router (we have the same router) but got no deauth key in the capture.

Where im stuck right now is, and I know im new but how to stay ahead of security. Is it going deeper then linux based tools?

I know this is like a essay lol but I just havnt been able to find an answer to these questions!

Thanks guys!