|
Search Results
|
| Post |
Author |
Forum
[desc]
|
Replies |
Views |
Posted |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| added full support for hashcat hashmode -m 16100 (TACAS+)
now detection and conversion of CISCO TACACS+ Authentication (on LoopBack, Ethernet and WLAN)
get the example cap from here: https://blog.sy... |
|
ZerBea |
User Contributions
|
648 |
487,343 |
11-28-2017, 04:45 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Correct. You need an ESSID and a wordlist to calculate a PMK. Or you captured a PMK from WLAN traffic.
Otherwise it is not possible to use hashmode -m 2501. |
|
ZerBea |
User Contributions
|
648 |
487,343 |
03-21-2018, 11:29 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Run wlandump-ng or hcxdumptool for some days. With a little luck, a PSK or a PMK is inside the captured file.
Read this complete thread. Everything is explained inside (including examples).
But wh... |
|
ZerBea |
User Contributions
|
648 |
487,343 |
03-22-2018, 08:43 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| No, macOS is not supported, because hcxdumptool and wlandump-ng are too LINUX specific.
make on macOS is disabled
You can try a VM. |
|
ZerBea |
User Contributions
|
648 |
487,343 |
04-19-2018, 08:00 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi RashidMalik.
This tool (and some others ) is located on GitHub (https://github.com/ZerBea):
https://github.com/ZerBea/hcxkeys |
|
ZerBea |
User Contributions
|
648 |
487,343 |
05-16-2018, 09:31 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi DKblue.
usefull
all handshakes (authenticated and not authenticated) , all message_pairs (including message_pairs that need nonce-error-corrections)
valid (matching M1 and M2)
wlandump-ng a... |
|
ZerBea |
User Contributions
|
648 |
487,343 |
12-02-2017, 10:50 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi DKblue.
You've done the right things. That is the way to make a flawless and clean cap.
The second way is to use the option -p from wlancap2hcx:
-p : output merged pcap file (upload this file t... |
|
ZerBea |
User Contributions
|
648 |
487,343 |
12-02-2017, 04:16 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi DKblue.
Nice snapshot. At least you are able to recover the key. That's great.
But it's not a good idea to use wlangenpmk (as it is much slower than hascat). This tool was designed for analysis... |
|
ZerBea |
User Contributions
|
648 |
487,343 |
12-05-2017, 10:09 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| There are only a few things to consider:
KISS (Keep it Simple, Stupid)
good TTP (Tactics, Techniques and Procedures)
follow the traditional Intelligence Cycle |
|
ZerBea |
User Contributions
|
648 |
487,343 |
05-17-2018, 09:50 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| By the latest hashcat improvement hcxtools are able to control hashcats nonce-error-corrections (nonce-error-corrections on/off):
hcxdumptool -> hcxpcaptool -> hashcat
https://github.com/hashcat/h... |
|
ZerBea |
User Contributions
|
648 |
487,343 |
06-15-2018, 05:53 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| hcxpcaptool: Added full support for AVS header (DLT_IEEE802_11_RADIO_AVS)
Read more about the common capture formats here:
https://www.lancom-systems.com/docs/LCOS/reference-manual/#Referenzhandbu... |
|
ZerBea |
User Contributions
|
648 |
487,343 |
06-24-2018, 08:31 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi slyexe
Yes, but we are still running into problems on big endian machines. The source contains allready some muscle fixes, but there is a lot of work todo. There are also many OSX fixes inside the... |
|
ZerBea |
User Contributions
|
648 |
487,343 |
12-06-2017, 10:09 AM |
| |
|
Thread: [ask] cap to hccapx
Post: RE: [ask] cap to hccapx
| Hi ghsi10.
Nice idea (a python/java port).
But if you do that, please do not write this message_pairs into your converted hccapx:
MESSAGE_PAIR_M32E3 (3)
MESSAGE_PAIR_M32E3 (131)
MESSAGE_PAIR_M34E... |
|
ZerBea |
User Contributions
|
6 |
6,453 |
12-07-2017, 10:26 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi DKblue.
You're welcome. I know that ARG forum, well. There are nice posts inside about Fibertel's and Speedy's.
The solution for your problem is a simple bash script that:
disables NetworkMana... |
|
ZerBea |
User Contributions
|
648 |
487,343 |
12-07-2017, 10:52 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi DKblue.
The problems aren't so big as you might think.
Penetration distros doesn't start as many unwanted services as multimedia distros. So there are only a few services to stop.
There is no re... |
|
ZerBea |
User Contributions
|
648 |
487,343 |
12-08-2017, 09:21 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| BTW:
Parsing pre-hashes or nonces isn't really witchcraft. We are doing this allready:
hcxpcaptool -h
--netntlm-out=
In that case a SHA1 pre-hash, based on an EAP authentication frame, is parsed t... |
|
ZerBea |
User Contributions
|
648 |
487,343 |
07-23-2018, 11:37 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| The next big issue is related to ATHEROS driver ath9k_htc:
ath9k_htc/htc_9271-1.4.0.fw
FCS is calculated in a wrong way on transmitted ack frames.
frame 1: ath9k_htc (the last two bytes are missi... |
|
ZerBea |
User Contributions
|
648 |
487,343 |
07-28-2018, 12:20 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Some words about wlancap2hcx:
wlancap2hcx need the ESSID received before the handshake follows! Mainly the ESSID is taken from an associationrequest (priority 1).
If you got some caps, that are ... |
|
ZerBea |
User Contributions
|
648 |
487,343 |
12-10-2017, 10:00 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi ee10.
No it isn't possble. Searching, comparing, ignoring ESSIDs costs too much cpu cycles. To went into an allready initiated authentication process we must be extreme fast (faster than the ap!).... |
|
ZerBea |
User Contributions
|
648 |
487,343 |
12-13-2017, 11:46 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Latest update hcxtools (17 hours ago): https://github.com/ZerBea/hcxtools/commit/5d14941d6b5134aea89d9cb43458e858b3c808a5
Update hcxdumptool to 4.2.0: today or tomorrow, because I received many featu... |
|
ZerBea |
User Contributions
|
648 |
487,343 |
08-04-2018, 10:24 AM |
