Huawei router models HG520b and HG520c contain a key generator command (mac2wepkey) in their TELNET interface. They also contain a command to change the MAC address (fakemac).
It is possible to change our MAC to generate the default WEP key of a MAC of our choosing.
This was published by adiaz last August in Comunidad Underground de México. Over the past few months we have been working on obtaining the algorithm to create our own key generator and we finally made it!
The first step was generating some lists containing MAC, SSID and WEP keys of about 200 entries and trying to identify patterns. The first thing we noticed was that the WEP key had values from 30 to 39 and from 61 to 66. These values correspond to the numbers 1 to 9 and letters a-f in ASCII.
Read more: websec