|
Search Results
|
| Post |
Author |
Forum |
Replies |
Views
[desc]
|
Posted |
| |
|
Thread: Handshake timestamps do not match packets no.
Post: RE: Handshake timestamps do not match packets no.
| You're missing nothing. Aircrack is running into several issues:
https://github.com/aircrack-ng/aircrack-ng/issues/2067
https://github.com/aircrack-ng/aircrack-ng/issues/1958
and the complete hands... |
|
ZerBea |
General Talk
|
3 |
1,479 |
12-15-2019, 06:18 PM |
| |
|
Thread: Handshake timestamps do not match packets no.
Post: RE: Handshake timestamps do not match packets no.
| cap2hccapx, hcxpcaptool and hcxpcapng tool calculating EAPOL time values (count time between EAPOL messages), because you can't trust the RC in case of a packet loss (therefore we have nonce-error-cor... |
|
ZerBea |
General Talk
|
3 |
1,479 |
12-17-2019, 09:24 AM |
| |
|
Thread: PMKID
Post: RE: PMKID
| It is mandatory to request the PMKID from an access point (EAPOL M1) or to retrieve it from a client (reassociation request). |
|
ZerBea |
General Talk
|
2 |
1,508 |
10-04-2019, 05:14 PM |
| |
|
Thread: hcxdumptool install problem
Post: RE: hcxdumptool install problem
| $ hcxdumptool --help will show you the correct syntax
add target AP_MC to filterlist.txt (format 112233445566)
replace --filterlist with --filterlist_ap
replace --enable_status with --enable_status... |
|
ZerBea |
hashcat
|
3 |
1,509 |
04-06-2020, 05:50 PM |
| |
|
Thread: hcxdumptool install problem
Post: RE: hcxdumptool install problem
| Do not(!) run airmon-ng! The script (1540 lines to do such a simple thing as setting monitor mode) is designed to be used by aircrack-ng suite and not by hcxdumptool. It will create a virtual monitor ... |
|
ZerBea |
hashcat
|
3 |
1,509 |
04-07-2020, 08:47 AM |
| |
|
Thread: cap to hccapx problem [Zero value timestamps detected]
Post: RE: cap to hccapx problem [Zero value timestamps d...
| That isn't a cap2hccapx issue.
The timestamps are zeroed in your cap file. Additional you're missing some important frames (authentication, association, undirected proberequest frames).
Code:
--
... |
|
ZerBea |
hashcat
|
3 |
1,532 |
02-11-2020, 02:15 PM |
| |
|
Thread: cap to hccapx problem [Zero value timestamps detected]
Post: RE: cap to hccapx problem [Zero value timestamps d...
| The PMKID attack is described here:
https://hashcat.net/forum/thread-7717.html
hashmode 22000 is available by git head of hashcat, here:
https://github.com/hashcat/hashcat
How can i get hashes... |
|
ZerBea |
hashcat
|
3 |
1,532 |
02-11-2020, 11:13 PM |
| |
|
Thread: Cap file convert to hccapx HELP
Post: RE: Cap file convert to hccapx HELP
| Ok, thanks.
Please note that the hccapx format is now DEPRECATED
-> I know: hccapx is a dinosaur (R.i.P)
https://github.com/hashcat/hashcat/issues/1816 |
|
ZerBea |
hashcat
|
4 |
1,543 |
02-12-2020, 06:20 PM |
| |
|
Thread: Cap file convert to hccapx HELP
Post: RE: Cap file convert to hccapx HELP
| @Uraniumhazee
Here you told us, that you're using wifislax:
https://hashcat.net/forum/thread-8959-post-47563.html#pid47563
This is the forum of wifislax:
https://foro.seguridadwireless.net/
Maybe... |
|
ZerBea |
hashcat
|
4 |
1,543 |
02-12-2020, 07:09 PM |
| |
|
Thread: hccapx file with more handshakes - exhausted
Post: RE: hccapx file with more handshakes - exhausted
| There is work in progress on wifite2:
https://github.com/kimocoder/wifite2/issues/1
as well as on aircrack-ng:
https://github.com/aircrack-ng/aircrack-ng/issues/2079
https://github.com/aircrack-... |
|
ZerBea |
hashcat
|
3 |
1,582 |
11-05-2019, 09:08 AM |
| |
|
Thread: PMKID question
Post: RE: PMKID question
| Only superficially - I'm still wrestling with Diffie-Hellman. |
|
ZerBea |
hashcat
|
4 |
1,698 |
09-26-2019, 10:55 AM |
| |
|
Thread: PMKID question
Post: RE: PMKID question
| We can take the PMKID from this frames (PBKDF2 hashcat hashmode 16800):
EAPOL M1 from access point (in this case we need one additional frame to get the ESSID: ASSOCIATIONREQUEST, REASSOCIATIONREQUES... |
|
ZerBea |
hashcat
|
4 |
1,698 |
09-25-2019, 07:50 AM |
| |
|
Thread: hcxtools "whoismac" command
Post: RE: hcxtools "whoismac" command
| whoismac shows VENDOR informations about a given MAC. This can be a single MAC
-m : mac (six bytes of mac addr) or
: oui (fist three bytes of mac addr)
$ whoismac -m 14cc2000... |
|
ZerBea |
hashcat
|
2 |
1,711 |
02-03-2019, 05:51 PM |
| |
|
Thread: correct dictionary but he doesn't think
Post: RE: correct dictionary but he doesn't think
| ...does anyone have an idea of what can be ?
Maybe the conversion from cap to hccapx failed. For a comprehensive answer, we need the cap file. |
|
ZerBea |
hashcat
|
4 |
1,815 |
09-16-2019, 04:06 PM |
| |
|
Thread: Does the new method work out of the box with Cali?
Post: RE: Does the new method work out of the box with C...
| It depend on the WiFi adapter and the driver. If the driver support monitor mode and full packet injection, it will work out of the box, running Linux systems.
Preferred distribution is Arch Linux,... |
|
ZerBea |
hashcat
|
6 |
2,154 |
08-15-2019, 01:28 PM |
| |
|
Thread: Does the new method work out of the box with Cali?
Post: RE: Does the new method work out of the box with C...
| Of course, Wireshark is able to capture packets in monitor mode:
https://wiki.wireshark.org/CaptureSetup/WLAN
but it will put them into monitor mode, running libpcap:
https://wiki.wireshark.org/Cap... |
|
ZerBea |
hashcat
|
6 |
2,154 |
08-15-2019, 02:05 PM |
| |
|
Thread: Does the new method work out of the box with Cali?
Post: RE: Does the new method work out of the box with C...
| @ Ar76
No, libpcap is open source. You can get every information here:
https://github.com/the-tcpdump-group/libpcap
Additionally you need a driver. This driver must support monitor mode and full ... |
|
ZerBea |
hashcat
|
6 |
2,154 |
08-15-2019, 10:52 PM |
| |
|
Thread: How to view SSID of cracked PMKID (16800) PCAP?
Post: RE: How to view SSID of cracked PMKID (16800) PCAP...
| And some of this characters will destroy your terminal. This is especially the case if escape sequences are in use! So it is definitely a good idea to hexify them
Examples:
https://wpa-sec.stanev.... |
|
ZerBea |
hashcat
|
6 |
2,252 |
04-01-2020, 03:38 PM |
| |
|
Thread: How to view SSID of cracked PMKID (16800) PCAP?
Post: RE: How to view SSID of cracked PMKID (16800) PCAP...
| Are you running an older version of hashcat?
$ hashcat -V
v5.1.0-1569-g74c1bf81+
potfile: PMK * ESSID : PSK
Code:
--
5b13d4babb3714ccc62c9f71864bc984efd6a55f237c7a87fc2151e1ca658a9d*ed4871624... |
|
ZerBea |
hashcat
|
6 |
2,252 |
01-12-2020, 12:07 PM |
| |
|
Thread: need help with hcx dumptool what am i doing wrong
Post: RE: need help with hcx dumptool what am i doing wr...
| In your case:
[16:26:17 - 001] 009fa9073914 -> 5c93a20b3897 [FOUND AUTHORIZED HANDSHAKE, EAPOL TIMEOUT 2516]
[16:40:15 - 001] 009fa9073914 -> ccfb65942f7e [FOUND AUTHORIZED HANDSHAKE, EAPOL TIMEOUT ... |
|
ZerBea |
hashcat
|
2 |
2,293 |
11-06-2018, 10:36 AM |
