|
Search Results
|
| Post
[desc]
|
Author |
Forum |
Replies |
Views |
Posted |
| |
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: hcxtools - solution for capturing wlan traffic and...
| Small set of tools to capture and convert packets from wlan devices designed for the use with latest hashcat:
wlandump-ng (Small, fast and powerfull deauthentication/authentication/response tool)
... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
06-23-2017, 04:24 PM |
| |
|
Thread: 4-Way Handshake vs PMKID
Post: RE: 4-Way Handshake vs PMKID
| How did you measure it?
My results:
$ time hashcat -m 2500 test.hccapx --nonce-error-corrections=0 digit08
hashcat (v5.1.0-855-g9ced13cc) starting...
Session..........: hashcat ... |
|
ZerBea |
hashcat
|
14 |
9,426 |
04-05-2019, 03:53 PM |
| |
|
Thread: 4-Way Handshake vs PMKID
Post: RE: 4-Way Handshake vs PMKID
| How do you know, how complex my both PSKs are!
and you didn't answer my first question:
How did you measure it?
$ time hashcat -m 2500 test.hccapx --nonce-error-corrections=0 digit20
hashcat (... |
|
ZerBea |
hashcat
|
14 |
9,426 |
04-05-2019, 04:25 PM |
| |
|
Thread: 4-Way Handshake vs PMKID
Post: RE: 4-Way Handshake vs PMKID
| 1. Calculating of PMKID is faster
PMKID = HMAC-SHA1-128(PMK, "PMK Name" | MAC_AP | MAC_STA)
2. You run hashcat with default nonce-error-corrections on WPA-EAPOL-PBKDF2, so every md5 (WPA1) or sha ... |
|
ZerBea |
hashcat
|
14 |
9,426 |
04-05-2019, 04:51 PM |
| |
|
Thread: 4-Way Handshake vs PMKID
Post: RE: 4-Way Handshake vs PMKID
| As Atom said, PBKDF2 will cost us much time!
Now we drop PBKDF2:
$ time hashcat -m 2501 test.hccapx --nonce-error-corrections=0 foundhashcat.pmk
hashcat (v5.1.0-855-g9ced13cc) starting...
Se... |
|
ZerBea |
hashcat
|
14 |
9,426 |
04-05-2019, 05:08 PM |
| |
|
Thread: 4-Way Handshake vs PMKID
Post: RE: 4-Way Handshake vs PMKID
| @kryplasemv
every client will receive its own (calculated) PMKID from the access point because the MAC addresses are part of the calculation
PMKID = HMAC-SHA1-128(PMK, "PMK Name" | MAC_AP | MAC_STA)... |
|
ZerBea |
hashcat
|
14 |
9,426 |
06-17-2019, 07:36 AM |
| |
|
Thread: 4-Way Handshake vs PMKID
Post: RE: 4-Way Handshake vs PMKID
| @Mem5
The construction (PBKDF2 calculation) of the plainmasterkey (PMK) is for both hash modes (2500 and 16800) the same and take long period of CPU/GPU time. This first part is a really slow part.
... |
|
ZerBea |
hashcat
|
14 |
9,426 |
06-17-2019, 07:56 AM |
| |
|
Thread: ALFA AWUS036NHR V2 handshake
Post: RE: ALFA AWUS036NHR V2 handshake
| The driver supplied with the official kernel neither support monitor mode nor packet injection. |
|
ZerBea |
hashcat
|
3 |
1,478 |
01-21-2020, 05:24 PM |
| |
|
Thread: ALFA AWUS036NHR V2 handshake
Post: RE: ALFA AWUS036NHR V2 handshake
|
hubi2000 Wrote: (01-21-2020, 08:42 PM)
--
what I can do can you help me :(
ZerBea
--
Unfortunately I can't help you. If you're doing a google search, you'll see many comments like this:
Avoid ..., N... |
|
ZerBea |
hashcat
|
3 |
1,478 |
01-21-2020, 09:15 PM |
| |
|
Thread: Any help With hcxdumptool and hashcat
Post: RE: Any help With hcxdumptool and hashcat
| Did you read the helpmenu of hcxdumptool and hcxpcaptool?
I asked this, because you are running hcxpcaptool options on hcxdumptool!
$ hcxdumptool -i wlan0mon -o pmkid.pcapng --enable_status=1
Do ... |
|
ZerBea |
hashcat
|
5 |
3,554 |
02-27-2019, 11:27 AM |
| |
|
Thread: Any help With hcxdumptool and hashcat
Post: RE: Any help With hcxdumptool and hashcat
| hcxdumptool set monitor mode, but it doesn't kill all services, which takes access to the device (that is your job). Therefore we use ioctl commands. So if you have a device called wlan0 and the drive... |
|
ZerBea |
hashcat
|
5 |
3,554 |
02-27-2019, 02:26 PM |
| |
|
Thread: Anyone with a amd/radeon GPU rig running on linux?
Post: RE: Anyone with a amd/radeon GPU rig running on li...
| Please add this to list of cons: Ancient/limited kernel versions and very limited distributions
https://github.com/RadeonOpenCompute/ROCm#supported-operating-systems
kernel 4.15, kernel 4.18 and ker... |
|
ZerBea |
hashcat
|
5 |
1,001 |
07-11-2020, 10:14 AM |
| |
|
Thread: Archer dual band t4u v1 monitor mode
Post: RE: Archer dual band t4u v1 monitor mode
| According to wikidevi it is not possible, running Linux "out of the box":
https://wikidevi.com/wiki/TP-LINK_Archer_T4U
You must compile a driver that support monitor mode and packet injection. For... |
|
ZerBea |
Hardware
|
5 |
3,389 |
09-21-2019, 10:56 AM |
| |
|
Thread: Archer dual band t4u v1 monitor mode
Post: RE: Archer dual band t4u v1 monitor mode
| The Fritzbox isn't vulnerable. You will not receive a PMKID. |
|
ZerBea |
Hardware
|
5 |
3,389 |
09-22-2019, 07:13 PM |
| |
|
Thread: Archer dual band t4u v1 monitor mode
Post: RE: Archer dual band t4u v1 monitor mode
| If the access point is hardened, search for weak clients.
Here is an example, of a weak client:
https://github.com/ZerBea/hcxtools/issues/112#issuecomment-532537154 |
|
ZerBea |
Hardware
|
5 |
3,389 |
09-23-2019, 11:40 PM |
| |
|
Thread: ATTENTION! OpenCL kernel self-test failed.
Post: RE: ATTENTION! OpenCL kernel self-test failed.
| @ philsmd
latest tests of 22000 - WPA-PBKDF2-PMKID+EAPOL are very impressive. 2200x offers many advantages. |
|
ZerBea |
hashcat
|
31 |
12,802 |
12-22-2019, 12:44 PM |
| |
|
Thread: Automatic Handshake Extraction/Separation and hccapx Generation Tool
Post: RE: Automatic Handshake Extraction/Separation and ...
| Hi JohnDN90.
That is a nice tool, and a really like that idea. There is also another attempt to do this (https://github.com/hashcat/hashcat-utils/pull/39). I decided to support both with an option to... |
|
ZerBea |
User Contributions
|
3 |
7,512 |
01-17-2018, 12:21 PM |
| |
|
Thread: Automatic Handshake Extraction/Separation and hccapx Generation Tool
Post: RE: Automatic Handshake Extraction/Separation and ...
| Hi JohnDN90.
Pushed an update some minutes ago. Using Option -O will give you raw handshakes (comparable to pyrit: --all-handhakes).
You can use every messagepair to recover the key:
M1M2 (not a... |
|
ZerBea |
User Contributions
|
3 |
7,512 |
01-17-2018, 04:45 PM |
| |
|
Thread: Cannot capture WPA handshake on macOS by any means
Post: RE: Cannot capture WPA handshake on macOS by any m...
| This function is extremely limited on proprietary operating systems.
Read more here:
https://wiki.wireshark.org/CaptureSetup/WLAN
Recommendation:
Linux and a WiFi adapter whose driver support mo... |
|
ZerBea |
General Talk
|
1 |
1,136 |
01-25-2020, 09:57 AM |
| |
|
Thread: Cannot generate PMKID.txt
Post: RE: Cannot generate PMKID.txt
| If you didn't captured a valid PMKID, your file PMKID.txt (-z) remains empty. The same applies for your file hcxdump.hccapx (-o) if you didn't captured a valid handshake. |
|
ZerBea |
hashcat
|
6 |
3,925 |
02-03-2019, 05:54 PM |
