|
Search Results
|
| Post
[desc]
|
Author |
Forum |
Replies |
Views |
Posted |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Well, changed some options
hcxdumpttool is aggressive by default:
$ hcxdumptool -h
hcxdumptool 4.1.5 (C) 2018 ZeroBeat
-D : do not transmit deauthentications or disassociations
-R ... |
|
ZerBea |
User Contributions
|
648 |
487,306 |
03-18-2018, 05:28 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Every adapter which use rtl8812au driver is supported (for example: Edimax AC600 USB).
There is no benefit using a dual band adapter. hcxdumptool attacks a 5GHz client on 2.4GHz if the he has enabled... |
|
ZerBea |
User Contributions
|
648 |
487,306 |
03-20-2018, 09:28 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi baba.
Read this: https://hashcat.net/forum/thread-7337.html
and this: https://hashcat.net/forum/thread-6661-post-37219.html#pid37219
But it will not lead you to the desired result.
This hashm... |
|
ZerBea |
User Contributions
|
648 |
487,306 |
03-21-2018, 12:14 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Well, baba.
There is no single command to do this. You need more than one command:
1) convert your cap to hccapx
2) calculate PMK list for that ESSID using your favourite wordlist: wlangenpmkocl -e... |
|
ZerBea |
User Contributions
|
648 |
487,306 |
03-21-2018, 09:05 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Correct. You need an ESSID and a wordlist to calculate a PMK. Or you captured a PMK from WLAN traffic.
Otherwise it is not possible to use hashmode -m 2501. |
|
ZerBea |
User Contributions
|
648 |
487,306 |
03-21-2018, 11:29 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Run wlandump-ng or hcxdumptool for some days. With a little luck, a PSK or a PMK is inside the captured file.
Read this complete thread. Everything is explained inside (including examples).
But wh... |
|
ZerBea |
User Contributions
|
648 |
487,306 |
03-22-2018, 08:43 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi taxil.
That is a typical issue of that distribution and the included drivers.
For example:
https://null-byte.wonderhowto.com/forum/problems-with-tl-wn722n-v2-monitor-mode-0178595/
Device is not... |
|
ZerBea |
User Contributions
|
648 |
487,306 |
04-19-2018, 04:22 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| No, macOS is not supported, because hcxdumptool and wlandump-ng are too LINUX specific.
make on macOS is disabled
You can try a VM. |
|
ZerBea |
User Contributions
|
648 |
487,306 |
04-19-2018, 08:00 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Your firmware is old.
[46356.910951] usb 5-4.1.3: Manufacturer: ATHEROS
[46356.910952] usb 5-4.1.3: SerialNumber: 12345
[46356.922044] usb 5-4.1.3: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw... |
|
ZerBea |
User Contributions
|
648 |
487,306 |
04-19-2018, 09:56 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi taxil.
tested your blacklist:
$ sudo hcxdumptool -i wlp39s0f3u4u5 -o test.pcap -s -B blacklistO.txt
start capturing (stop with ctrl+c)
INTERFACE: wlp39s0f3u4u5
MAC_AP...: e80410a4b6d2 (rogue... |
|
ZerBea |
User Contributions
|
648 |
487,306 |
04-26-2018, 10:32 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| There ara several ways to do this. But keep in mind, that there isn't a 100% solution to create a 100% crackable hccapx file. A big problem is a packetloss during capturing. This will not happen on ap... |
|
ZerBea |
User Contributions
|
648 |
487,306 |
05-03-2018, 12:57 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi RashidMalik.
wlandump-ng -l and hcxdumptool -O enable capturing of IPv4 and IPv6 traffic (for example from hotspots).
For example all non EAP based authentications like:
-TLS authentications
-C... |
|
ZerBea |
User Contributions
|
648 |
487,306 |
05-12-2018, 06:41 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi RashidMalik.
Nice to hear that.
Q1 What is the difference between these two tools "wlancap2hcx" and "hcxpcaptool"? They seem to have some common functionality? Which one is suitable for which pur... |
|
ZerBea |
User Contributions
|
648 |
487,306 |
05-14-2018, 08:30 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Oh, I noticed, that I didn't answer your first question:
How does one find/extract these clear passwords (Example commands please!)? Do we need to enable a certain option for wlandump to capture thes... |
|
ZerBea |
User Contributions
|
648 |
487,306 |
05-14-2018, 08:50 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi RashidMalik.
This tool (and some others ) is located on GitHub (https://github.com/ZerBea):
https://github.com/ZerBea/hcxkeys |
|
ZerBea |
User Contributions
|
648 |
487,306 |
05-16-2018, 09:31 PM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi taxil.
Neither method1 nor method 2 nor method 3.
First some words about the basic rationale behind hcxtools:
-hcxtools are analysis tools
-what we did not record is gone forever
1) get all ... |
|
ZerBea |
User Contributions
|
648 |
487,306 |
05-17-2018, 09:29 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| There are only a few things to consider:
KISS (Keep it Simple, Stupid)
good TTP (Tactics, Techniques and Procedures)
follow the traditional Intelligence Cycle |
|
ZerBea |
User Contributions
|
648 |
487,306 |
05-17-2018, 09:50 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| If your hashcat.2500.pot file contains not so much data to analyze you can build a bigger one based on wpa-sec cracked data:
Download the python client from here:
https://wpa-sec.stanev.org/hc/hel... |
|
ZerBea |
User Contributions
|
648 |
487,306 |
05-17-2018, 10:08 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi wakawaka.
Nice, that the tools are working for you, now.
The difference between hcxpcaptool -o and -O is:
-o will convert only one handshake each mac_ap, mac_sta, ESSID combination. The handshak... |
|
ZerBea |
User Contributions
|
648 |
487,306 |
05-22-2018, 09:30 AM |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
| Hi RashidMalik.
Q1:
I analyzed several handshakes and found out that the anonce (nonce of an AP) isn't random.
If we captured more than on M1 and/or M3 we are able to calculate a complete anonce ... |
|
ZerBea |
User Contributions
|
648 |
487,306 |
05-22-2018, 10:27 AM |
