|
Search Results
|
| Post |
Author |
Forum
[desc]
|
Replies |
Views |
Posted |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Due to several bug fixes and changes hcxdumptool and hcxtools moved to v5.1.1.
Important changes:
removed....: wlanhcx2psk
replaced by: hcxpsktool
removed....: wlanhcx2cap
replaced by: hcxhas... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
02-03-2019, 06:33 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| allready answered here: https://hashcat.net/forum/thread-8183-post-43956.html#pid43956 |
|
ZerBea |
User Contributions
|
648 |
487,307 |
02-27-2019, 11:43 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi RashidMalik.
wlandump-ng -l and hcxdumptool -O enable capturing of IPv4 and IPv6 traffic (for example from hotspots).
For example all non EAP based authentications like:
-TLS authentications
-C... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
05-12-2018, 06:41 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi RashidMalik.
Nice to hear that.
Q1 What is the difference between these two tools "wlancap2hcx" and "hcxpcaptool"? They seem to have some common functionality? Which one is suitable for which pur... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
05-14-2018, 08:30 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Oh, I noticed, that I didn't answer your first question:
How does one find/extract these clear passwords (Example commands please!)? Do we need to enable a certain option for wlandump to capture thes... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
05-14-2018, 08:50 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Please attach an example pcapng so that I'm able to reproduce it. You can use tshark to find the ESSIDs.
Example:
You captured test.pcapng
Now run tshark
$ tshark -r test.pcapng -T fields -e w... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
03-16-2019, 11:56 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi taxil.
Neither method1 nor method 2 nor method 3.
First some words about the basic rationale behind hcxtools:
-hcxtools are analysis tools
-what we did not record is gone forever
1) get all ... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
05-17-2018, 09:29 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| If your hashcat.2500.pot file contains not so much data to analyze you can build a bigger one based on wpa-sec cracked data:
Download the python client from here:
https://wpa-sec.stanev.org/hc/hel... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
05-17-2018, 10:08 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi wakawaka.
Nice, that the tools are working for you, now.
The difference between hcxpcaptool -o and -O is:
-o will convert only one handshake each mac_ap, mac_sta, ESSID combination. The handshak... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
05-22-2018, 09:30 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Fixed that issue with commit:
https://github.com/ZerBea/hcxtools/commit/5c2c73010e6d1cabc502961fbb43307ebee1373c
The function to detect broken ESSIDs didn't work as expected and removed more ESSIDs ... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
03-20-2019, 09:48 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi RashidMalik.
Q1:
I analyzed several handshakes and found out that the anonce (nonce of an AP) isn't random.
If we captured more than on M1 and/or M3 we are able to calculate a complete anonce ... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
05-22-2018, 10:27 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Let me also explain "AP-less" in that content:
AP-less means that a client responds to an anonce from us. That will happen if a client tries to connect to us.
Either
if there is no AP in range of... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
05-22-2018, 12:00 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Oh, I'm so stupid, please forgive me. I didn't explain why I'm doing this:
Well, usually APs are in the middle of a flat, an apartment or a house.
Let's say we have a hot summer day and our targe... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
05-22-2018, 01:34 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| And this is really important:
Hashmodes 2501 and 16801 are not cracking hashmodes.
The are only usefull to verfify(!) an existing PMK. |
|
ZerBea |
User Contributions
|
648 |
487,307 |
04-10-2019, 10:06 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| We drop a packet if
it doesn't contain a usefull information (deauthentication frames, disassociations frames, ack frames, ...)
if it was transmitted twice or more
if it is damaged (and I mean real... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
04-14-2019, 01:46 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| I'm not sure if sombody ported hcxdumptool to run using NodeMCU. But there is a similar project here:
https://null-byte.wonderhowto.com/how-to/scan-fake-attack-wi-fi-networks-with-esp8266-based-wifi-... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
04-14-2019, 04:54 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Added full support (TZSP_ENCAP_IEEE_802_11) for TaZmen Sniffer Protocol (TZSP)
$ hcxpcaptool -V tzsp.pcap
start reading from tzsp.pcap
... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
06-22-2018, 03:02 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| hcxdumptool / hcxpcaptool: added detection of SAE authentication.
$ hcxpcaptool -V sae_simple_psk.pcapng
start reading from sae_simple_psk.pcapng
summary: �... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
06-27-2018, 03:52 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi rk3y.
How to analyze specific stations?
That depends on the depth of you analysis. For a simple analysis run:
hcxdumptool -> hcxpcaptool -T trafficlist *.cap
Result is a list, containig simple ... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
07-01-2018, 11:36 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| hcxpcaptool: added detection of FILS authentication.
$ hcxpcaptool -V -I identitylist *.pcapng
start reading from fils-handshake.pcapng
summary:
file name... |
|
ZerBea |
User Contributions
|
648 |
487,307 |
07-01-2018, 08:26 PM |
