Search Results
|
Post
[asc]
|
Author |
Forum |
Replies |
Views |
Posted |
|
|
Thread: Cannot generate PMKID.txt
Post: RE: Cannot generate PMKID.txt
By latest hcxtools commit,
https://github.com/ZerBea/hcxtools/commit/a55e58ecbf328fe5f140d892f16c9b72fa4e1401
now, hcxpcaptool will show a warning if no captures are loaded:
$ hcxpcaptool -z PMKI... |
|
ZerBea |
hashcat
|
6 |
3,928 |
02-03-2019, 07:12 PM |
|
|
Thread: Cannot capture WPA handshake on macOS by any means
Post: RE: Cannot capture WPA handshake on macOS by any m...
This function is extremely limited on proprietary operating systems.
Read more here:
https://wiki.wireshark.org/CaptureSetup/WLAN
Recommendation:
Linux and a WiFi adapter whose driver support mo... |
|
ZerBea |
General Talk
|
1 |
1,136 |
01-25-2020, 09:57 AM |
|
|
Thread: Automatic Handshake Extraction/Separation and hccapx Generation Tool
Post: RE: Automatic Handshake Extraction/Separation and ...
Hi JohnDN90.
That is a nice tool, and a really like that idea. There is also another attempt to do this (https://github.com/hashcat/hashcat-utils/pull/39). I decided to support both with an option to... |
|
ZerBea |
User Contributions
|
3 |
7,512 |
01-17-2018, 12:21 PM |
|
|
Thread: Automatic Handshake Extraction/Separation and hccapx Generation Tool
Post: RE: Automatic Handshake Extraction/Separation and ...
Hi JohnDN90.
Pushed an update some minutes ago. Using Option -O will give you raw handshakes (comparable to pyrit: --all-handhakes).
You can use every messagepair to recover the key:
M1M2 (not a... |
|
ZerBea |
User Contributions
|
3 |
7,512 |
01-17-2018, 04:45 PM |
|
|
Thread: ATTENTION! OpenCL kernel self-test failed.
Post: RE: ATTENTION! OpenCL kernel self-test failed.
@ philsmd
latest tests of 22000 - WPA-PBKDF2-PMKID+EAPOL are very impressive. 2200x offers many advantages. |
|
ZerBea |
hashcat
|
31 |
12,802 |
12-22-2019, 12:44 PM |
|
|
Thread: Archer dual band t4u v1 monitor mode
Post: RE: Archer dual band t4u v1 monitor mode
According to wikidevi it is not possible, running Linux "out of the box":
https://wikidevi.com/wiki/TP-LINK_Archer_T4U
You must compile a driver that support monitor mode and packet injection. For... |
|
ZerBea |
Hardware
|
5 |
3,389 |
09-21-2019, 10:56 AM |
|
|
Thread: Archer dual band t4u v1 monitor mode
Post: RE: Archer dual band t4u v1 monitor mode
The Fritzbox isn't vulnerable. You will not receive a PMKID. |
|
ZerBea |
Hardware
|
5 |
3,389 |
09-22-2019, 07:13 PM |
|
|
Thread: Archer dual band t4u v1 monitor mode
Post: RE: Archer dual band t4u v1 monitor mode
If the access point is hardened, search for weak clients.
Here is an example, of a weak client:
https://github.com/ZerBea/hcxtools/issues/112#issuecomment-532537154 |
|
ZerBea |
Hardware
|
5 |
3,389 |
09-23-2019, 11:40 PM |
|
|
Thread: Anyone with a amd/radeon GPU rig running on linux?
Post: RE: Anyone with a amd/radeon GPU rig running on li...
Please add this to list of cons: Ancient/limited kernel versions and very limited distributions
https://github.com/RadeonOpenCompute/ROCm#supported-operating-systems
kernel 4.15, kernel 4.18 and ker... |
|
ZerBea |
hashcat
|
5 |
1,001 |
07-11-2020, 10:14 AM |
|
|
Thread: Any help With hcxdumptool and hashcat
Post: RE: Any help With hcxdumptool and hashcat
Did you read the helpmenu of hcxdumptool and hcxpcaptool?
I asked this, because you are running hcxpcaptool options on hcxdumptool!
$ hcxdumptool -i wlan0mon -o pmkid.pcapng --enable_status=1
Do ... |
|
ZerBea |
hashcat
|
5 |
3,554 |
02-27-2019, 11:27 AM |
|
|
Thread: Any help With hcxdumptool and hashcat
Post: RE: Any help With hcxdumptool and hashcat
hcxdumptool set monitor mode, but it doesn't kill all services, which takes access to the device (that is your job). Therefore we use ioctl commands. So if you have a device called wlan0 and the drive... |
|
ZerBea |
hashcat
|
5 |
3,554 |
02-27-2019, 02:26 PM |
|
|
Thread: ALFA AWUS036NHR V2 handshake
Post: RE: ALFA AWUS036NHR V2 handshake
The driver supplied with the official kernel neither support monitor mode nor packet injection. |
|
ZerBea |
hashcat
|
3 |
1,478 |
01-21-2020, 05:24 PM |
|
|
Thread: ALFA AWUS036NHR V2 handshake
Post: RE: ALFA AWUS036NHR V2 handshake
hubi2000 Wrote: (01-21-2020, 08:42 PM)
--
what I can do can you help me :(
ZerBea
--
Unfortunately I can't help you. If you're doing a google search, you'll see many comments like this:
Avoid ..., N... |
|
ZerBea |
hashcat
|
3 |
1,478 |
01-21-2020, 09:15 PM |
|
|
Thread: 4-Way Handshake vs PMKID
Post: RE: 4-Way Handshake vs PMKID
How did you measure it?
My results:
$ time hashcat -m 2500 test.hccapx --nonce-error-corrections=0 digit08
hashcat (v5.1.0-855-g9ced13cc) starting...
Session..........: hashcat ... |
|
ZerBea |
hashcat
|
14 |
9,426 |
04-05-2019, 03:53 PM |
|
|
Thread: 4-Way Handshake vs PMKID
Post: RE: 4-Way Handshake vs PMKID
How do you know, how complex my both PSKs are!
and you didn't answer my first question:
How did you measure it?
$ time hashcat -m 2500 test.hccapx --nonce-error-corrections=0 digit20
hashcat (... |
|
ZerBea |
hashcat
|
14 |
9,426 |
04-05-2019, 04:25 PM |
|
|
Thread: 4-Way Handshake vs PMKID
Post: RE: 4-Way Handshake vs PMKID
1. Calculating of PMKID is faster
PMKID = HMAC-SHA1-128(PMK, "PMK Name" | MAC_AP | MAC_STA)
2. You run hashcat with default nonce-error-corrections on WPA-EAPOL-PBKDF2, so every md5 (WPA1) or sha ... |
|
ZerBea |
hashcat
|
14 |
9,426 |
04-05-2019, 04:51 PM |
|
|
Thread: 4-Way Handshake vs PMKID
Post: RE: 4-Way Handshake vs PMKID
As Atom said, PBKDF2 will cost us much time!
Now we drop PBKDF2:
$ time hashcat -m 2501 test.hccapx --nonce-error-corrections=0 foundhashcat.pmk
hashcat (v5.1.0-855-g9ced13cc) starting...
Se... |
|
ZerBea |
hashcat
|
14 |
9,426 |
04-05-2019, 05:08 PM |
|
|
Thread: 4-Way Handshake vs PMKID
Post: RE: 4-Way Handshake vs PMKID
@kryplasemv
every client will receive its own (calculated) PMKID from the access point because the MAC addresses are part of the calculation
PMKID = HMAC-SHA1-128(PMK, "PMK Name" | MAC_AP | MAC_STA)... |
|
ZerBea |
hashcat
|
14 |
9,426 |
06-17-2019, 07:36 AM |
|
|
Thread: 4-Way Handshake vs PMKID
Post: RE: 4-Way Handshake vs PMKID
@Mem5
The construction (PBKDF2 calculation) of the plainmasterkey (PMK) is for both hash modes (2500 and 16800) the same and take long period of CPU/GPU time. This first part is a really slow part.
... |
|
ZerBea |
hashcat
|
14 |
9,426 |
06-17-2019, 07:56 AM |
|
|
Thread: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
Post: hcxtools - solution for capturing wlan traffic and...
Small set of tools to capture and convert packets from wlan devices designed for the use with latest hashcat:
wlandump-ng (Small, fast and powerfull deauthentication/authentication/response tool)
... |
|
ZerBea |
User Contributions
|
648 |
487,081 |
06-23-2017, 04:24 PM |