Search Results
|
Post
[desc]
|
Author |
Forum |
Replies |
Views |
Posted |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
This feature is allready implemented in wlanhcx2ssid:
$ wlanhcx2ssid -h
usage: wlanhcx2ssid
options:
-i : input hccapx file
-p : change directory for outputfiles
-a ... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
07-06-2017, 08:46 AM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
New update https://github.com/ZerBea/hcxtools
added new tool wlangenpmk (plainmasterkey generator)
example:
$ wlangenpmk -p mypassword -e mynetwork
essid (networkname): mynetwork
password....... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
07-06-2017, 08:47 AM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
created a new branch: https://github.com/ZerBea/hcxkeys
added tools wlangenpmk (CPU) and wlangenpmkocl (GPU) to generate rainbowtables of common ESSIDS for use with hash-mode 2501
wlangenpmk 3.6... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
07-16-2017, 03:35 PM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
I've been asked to write a basic tutorial for wpa/wpa2 on hash-modes 2500, 2501, 12000.
Well, let's start:
1.
Get our example cap from https://wiki.wireshark.org/SampleCaptures
Download wpa-Indu... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
07-17-2017, 01:32 PM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
6.
let's start to crack it using hash-mode 2500 (the traditional way):
echo "Induction" > wordlist
$ hashcat -m 2500 --potfile-path=hc2500.pot test.hccapx wordlist
hashcat (v3.6.0-207-g1cd0212f) s... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
07-17-2017, 01:32 PM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
7.
let's start to crack it using hash-mode 2501 (the new and fast way):
generate the plainmasterkey
$ wlangenpmk -e Coherer -p Induction
essid (networkname): Coherer
password...........: Inductio... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
07-17-2017, 01:33 PM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
8.
let's start to crack it using hash-mode 12000 (the unconventional way):
$ wlanpmk2hcx -e Coherer -p a288fcf0caaacda9a9f58633ff35e8992a01d9c10ba5e02efdf8cb5d730ce7bc
use hashcat hash-mode -m 1200... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
07-17-2017, 01:33 PM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
Read more about the authentication process and the importance of the message M2 here:
https://hashcat.net/forum/thread-6745-post-36007.html#pid36007 |
|
ZerBea |
User Contributions
|
648 |
487,081 |
08-03-2017, 08:38 AM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
Circuit:
https://github.com/ZerBea/hcxtools/blob/master/gpiowait.odg
Parts:
1 x LED, Low-Current (Kingbright 2.2 V, 2 mA)
1 x Resistor 10k Ohms
1 x Resistor 330 Ohms
1 Push Button
20cm cable
... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
08-04-2017, 08:07 PM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
Thanks for the feedback. hcxtools should work on raspberry A, A+, B, B+, 2B and 3 (3: except build in wifi).
The compiler options depending on the version:
for arch:
$ gcc --version
gcc (GCC) 7.1.... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
08-08-2017, 02:55 PM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
Quick answer:
Yes, that's correct.
Long statement:
You need only to capture the M2 from a client. wlandump-ng and wlanresponse will calculate the M1.
wlandump-ng will show us this (using the -s ... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
08-11-2017, 03:34 PM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
It's just a wlan parser for hashcat - hashcat is the amazing tool. |
|
ZerBea |
User Contributions
|
648 |
487,081 |
08-12-2017, 09:50 AM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
added detection of zeroed plainmasterkeys to hcxtools:
$ wlancap2hcx -o test.hccapx *.cap
start reading from wlan.cap
8659109 packets processed (8659109 wlan, 0 lan, 0 loopback)
total 201527 u... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
08-14-2017, 12:15 PM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
How to increase hashcat's cracking speed on wpa/wpa2 by using wlandump forced handshakes only:
1. use wlandump-ng or wlanresponse to capture wlan traffic
2. increase cracking speed:
use wlan... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
08-16-2017, 10:23 AM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
How to convert hccapx back to cap:
cap2hccapx and wlancap2hcx don't convert the following message pairs:
MESSAGE_PAIR_M32E3 3
MESSAGE_PAIR_M32E3 131
MESSAGE_PAIR_M34E3 4
MESSAGE_PAIR_M34E3 132
... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
08-17-2017, 08:11 PM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
How to build up an environment for advanced wpa cracking:
Don't waste your time by testing useless wordlists, downloaded from the internet.
Create your own environment, using real hashes and passw... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
08-18-2017, 08:15 AM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
advanced wpa cracking - weak point analyse (1)
After a while it's time to do a weak point analyse.
Take a look into hashcat.pot.2500 and search for networks
using simliar default passwords.
Yo... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
08-18-2017, 12:59 PM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
weak point analyse (2)
Take a look into hashcat.pot.2500 and search for networks
using simliar default passwords.
Try to figure out how the algo is calculated.
pwhash will help you on hash cal... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
08-18-2017, 01:15 PM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
hcxtools filter options
------------------------
To satisfy hashcat, hcxtools have many build-in filteroptions:
1.
The Berkeley Packet Filter (BPF) is a very fast kernel filter.
It allows many ... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
08-28-2017, 09:10 AM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: RE: hcxtools - solution for capturing wlan traffic...
some information about the versioning of hcxtools:
hcxtools are based on a rolling development git branch. This branch is pretty closely synced to hashcat git branch.
That means: latest hcxtools ... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
09-02-2017, 11:25 AM |