hashcat Forum

I have a buffer that starts with HCPX so I want to crack it with hashcat mode=hc22000

How can I convert this buffer to hc22000 format?

(11-21-2022, 12:22 PM)marc1n Wrote: [ -> ]https://hashcat.net/wiki/doku.php?id=cracking_wpawpa2

Again. I don't have a PCAP file.
I have a bufferthat start with HCPX and I need to convert it for hc22000 struct

hcxtool cando this.
First convert hccapx back to cap:

(11-21-2022, 11:39 PM)ZerBea Wrote: [ -> ]hcxtool cando this.
First convert hccapx back to cap:

Code:

$ hcxhash2cap  --hccapx=your_hccapx_file
Than convert all cap files to hc22000
$ hcxpcapngtool -o test.hc22000 *.cap

How can I install hcxhash2cap and hcxpcapngtool tools in Ubuntu ?

Explained here (hcxtools: README.md)
https://github.com/ZerBea/hcxtools
and here (hcxdumptool: README.md):
https://github.com/ZerBea/hcxdumptool

Make sure all dependencies (that include the development tools like gcc and git) are installed before you try to compile the tools. That applies especially to OpenSSL 3.0!

BTW:
I do not recommend to convert a hccapx hash file to hc22000 format. It is a thousand times better to perform a new attack by hcxdumptool as described here:
https://hashcat.net/wiki/doku.php?id=cracking_wpawpa2
and, if possible, to get a PMKID as described here:
https://hashcat.net/forum/thread-7717.html

Please notice:
If the hccapx was converted from a crappy dump file, you'll waste your GPU time.
And I've seen a lot of (really) crappy dump files out in the wildness:
https://github.com/ZerBea/hcxtools/issues/223
https://github.com/ZerBea/hcxtools/issues/224
https://github.com/ZerBea/hcxtools/issues/227