I'm more interested in what he wants to do with the security camera system? lol
I mean I don't think the rounter has WPS because then he would have used reaver and the owners would be idiots, but then again ppl are idiots so that leaves most probably wpa2 which must be cracked with dictionary, because brute force would take, I don't know min 8 chars... years I think. And getting 4way handshake and then going to a dictionary for that would need to add an prefix or/and suffix combinations which would take extra time because face it what sane person has a password to the wifi that's in the dictionary when having security camera system? But then again ppl are morons, found an embassy with wps on and no wps lock setting once.
Either way what I wanted go get out of this is.
If you are robbing the place just put on masks and screw the cameras