Posts: 18
Threads: 0
Joined: Dec 2023
when converting dumpfile, i get this information warning
frequency statistics from radiotap header (frequency: received packets)
-----------------------------------------------------------------------
not available due to missing radiotap header
Information: no hashes written to hash files
Information: missing frames!
This dump file does not contain BEACON or PROBERESPONSE frames.
This frames contain the ESSID which is mandatory to calculate a PMK.
It always happens if the capture file was cleaned or
it could happen if filter options are used during capturing.
That makes it impossible to recover the PSK.
Information: missing frames!
This dump file does not contain undirected proberequest frames.
An undirected proberequest may contain information about the PSK.
It always happens if the capture file was cleaned or
it could happen if filter options are used during capturing.
That makes it hard to recover the PSK.
Information: missing frames!
This dump file does not contain important frames like
authentication, association or reassociation.
It always happens if the capture file was cleaned or
it could happen if filter options are used during capturing.
That makes it hard to recover the PSK.
Information: missing frames!
This dump file does not contain enough EAPOL M1 frames.
It always happens if the capture file was cleaned or
it could happen if filter options are used during capturing.
That makes it impossible to calculate nonce-error-correction values.
session summary
---------------
processed pcapng files................: 1
Posts: 1,042
Threads: 2
Joined: Jun 2017
12-05-2023, 01:23 PM
(This post was last modified: 12-05-2023, 01:28 PM by ZerBea.)
Nothing has been captured and your dump file is empty.
How determine a PMKID or a 4way handshake has been captured is described here:
https://hashcat.net/forum/thread-10253-p...l#pid59679
If you are not sure how to read the display information add --exitoneapol=7 to your command line.
hcxdumptool will terminate after a PMKID/handshake has benn captured.
BTW:
This warning is always displayed if undirected PROBEREQUESTs are filtered out by BPF:
Code:
Information: missing frames!
This dump file does not contain undirected proberequest frames.
An undirected proberequest may contain information about the PSK.
It always happens if the capture file was cleaned or
it could happen if filter options are used during capturing.
That makes it hard to recover the PSK.
Posts: 18
Threads: 0
Joined: Dec 2023
I haven't used any filter during this scan, I followed your instructions, how to fix this?
Posts: 1,042
Threads: 2
Joined: Jun 2017
12-05-2023, 01:30 PM
(This post was last modified: 12-05-2023, 01:31 PM by ZerBea.)
Please comment output of hcxdumptool -L. There are some drivers/devices that do not support hcxdumptool's attack modes.
Posts: 18
Threads: 0
Joined: Dec 2023
this is what comes up
─$ hcxdumptool -L
Requesting physical interface capabilities. This may take some time.
Please be patient...
available wlan devices:
phy idx hw-mac virtual-mac m ifname driver (protocol)
---------------------------------------------------------------------------------------------
5 7 b4b0246aba89 b4b0246aba89 + wlan0 rtl8xxxu (NETLINK)
* active monitor mode available (reported by driver)
+ monitor mode available (reported by driver)
- no monitor mode available
Posts: 1,042
Threads: 2
Joined: Jun 2017
12-05-2023, 01:35 PM
(This post was last modified: 12-05-2023, 01:44 PM by ZerBea.)
(12-05-2023, 01:28 PM)yuXfar Wrote: I haven't used any filter during this scan, I followed your instructions, how to fix this?
I can't say that, because you have not added the command line that you have used to convert the dump file ($ hcxpcapngtool ...).
To make sure, you have converted the correct dump file, the content of the working directory ($ ls *.pcapng) may be helpful too.
I guess there are a lot of empty dump files inside (from previous tests).
Posts: 1,042
Threads: 2
Joined: Jun 2017
(12-05-2023, 01:33 PM)yuXfar Wrote: this is what comes up
─$ hcxdumptool -L
Requesting physical interface capabilities. This may take some time.
Please be patient...
available wlan devices:
phy idx hw-mac virtual-mac m ifname driver (protocol)
---------------------------------------------------------------------------------------------
5 7 b4b0246aba89 b4b0246aba89 + wlan0 rtl8xxxu (NETLINK)
* active monitor mode available (reported by driver)
+ monitor mode available (reported by driver)
- no monitor mode available
Thanks. I tested som of these devices and all of them are working fine.
Posts: 18
Threads: 0
Joined: Dec 2023
12-05-2023, 01:43 PM
(This post was last modified: 12-05-2023, 01:43 PM by yuXfar.)
$ ls
20231204054140-wlan0.pcapng 20231204211833-wlan0.pcapng 20231205055747-wlan0.pcapng 20231205062410-wlan0.pcapng Capture-Pat-01.csv Capture-Pat-02.kismet.csv Capture-Pat-03.kismet.netxml filter.bpf Templates
20231204081401-wlan0.pcapng 20231204214556-wlan0.pcapng 20231205060232-wlan0.pcapng 20231205062458-wlan0.pcapng Capture-Pat-01.kismet.csv Capture-Pat-02.kismet.netxml Capture-Pat-03.log.csv hcxdumptool Videos
20231204081422-wlan0.pcapng 20231204221114-wlan0.pcapng 20231205060444-wlan0.pcapng allframes.pcapng Capture-Pat-01.kismet.netxml Capture-Pat-02.log.csv Desktop libpcap-1.10.4
20231204082707-wlan0.pcapng 20231205053825-wlan0.pcapng 20231205060619-wlan0.pcapng attack.bpf Capture-Pat-01.log.csv Capture-Pat-03.cap Documents Music
20231204083104-wlan0.pcapng 20231205054817-wlan0.pcapng 20231205062009-wlan0.pcapng attack.bpfc Capture-Pat-02.cap Capture-Pat-03.csv Downloads Pictures
20231204083518-wlan0.pcapng 20231205054958-wlan0.pcapng 20231205062133-wlan0.pcapng Capture-Pat-01.cap Capture-Pat-02.csv Capture-Pat-03.kismet.csv dumpfile.pcapng Public
this is inside my ls
Posts: 1,042
Threads: 2
Joined: Jun 2017
12-05-2023, 01:47 PM
(This post was last modified: 12-05-2023, 01:58 PM by ZerBea.)
(12-05-2023, 01:43 PM)yuXfar Wrote: $ ls
20231204054140-wlan0.pcapng 20231204211833-wlan0.pcapng 20231205055747-wlan0.pcapng 20231205062410-wlan0.pcapng Capture-Pat-01.csv Capture-Pat-02.kismet.csv Capture-Pat-03.kismet.netxml filter.bpf Templates
20231204081401-wlan0.pcapng 20231204214556-wlan0.pcapng 20231205060232-wlan0.pcapng 20231205062458-wlan0.pcapng Capture-Pat-01.kismet.csv Capture-Pat-02.kismet.netxml Capture-Pat-03.log.csv hcxdumptool Videos
20231204081422-wlan0.pcapng 20231204221114-wlan0.pcapng 20231205060444-wlan0.pcapng allframes.pcapng Capture-Pat-01.kismet.netxml Capture-Pat-02.log.csv Desktop libpcap-1.10.4
20231204082707-wlan0.pcapng 20231205053825-wlan0.pcapng 20231205060619-wlan0.pcapng attack.bpf Capture-Pat-01.log.csv Capture-Pat-03.cap Documents Music
20231204083104-wlan0.pcapng 20231205054817-wlan0.pcapng 20231205062009-wlan0.pcapng attack.bpfc Capture-Pat-02.cap Capture-Pat-03.csv Downloads Pictures
20231204083518-wlan0.pcapng 20231205054958-wlan0.pcapng 20231205062133-wlan0.pcapng Capture-Pat-01.cap Capture-Pat-02.csv Capture-Pat-03.kismet.csv dumpfile.pcapng Public
this is inside my ls
These are a lot of pcapng dump files.
Please try
Code:
$ hcxpcapngtool *.pcapng -o test.hc22000
$ cat test.hc22000
to see if one of them contain content. If yes, test.hc22000 should contain the hashes.
Or remove all pcapng dump files and start a new attempt.
Posts: 18
Threads: 0
Joined: Dec 2023
running both cpmmands
─(The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali)㉿The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali))-[~]
└─$ hcxdumptool *.pcapng -o test.hc22000
hcxdumptool: invalid option -- 'o'
hcxdumptool 6.3.2-70-gdf8f2e6 (C) 2023 by ZeroBeat
This is a penetration testing tool!
It is made to detect vulnerabilities in your NETWORK mercilessly!
usage:
$ hcxdumptool -h for an overview of all options
$ hcxdumptool --help for an example and trouble shooting
┌──(The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali)㉿The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali))-[~]
└─$ cat test.hc22000
cat: test.hc22000: No such file or directory
