+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: need help to convert .cap (/thread-10182.html)
need help to convert .cap - LivinCorrupt - 06-29-2021
Im getting
Handshake Extraction Failed!
error opening file stats/ESSID.txt: Permission denied
not sure how to fix this
RE: need help to convert .cap - Snoopy - 06-29-2021
without your commandline used, noone can nor will help you,
RE: need help to convert .cap - ZerBea - 06-29-2021
Just received a notice from Atom:
https://hashcat.net/cap2hashcat/
permission problem should be fixed, now.
RE: need help to convert .cap - LivinCorrupt - 06-29-2021
(06-29-2021, 04:19 PM)ZerBea Wrote: Just received a notice from Atom:
https://hashcat.net/cap2hashcat/
permission problem should be fixed, now.
Thank you
so i got the file.. and when it converts it has warnings
Code:
[color=#000000]reading from 9959_1624982261.cap...
summary capture file
--------------------
file name................................: 9959_1624982261.cap
version (pcap/cap).......................: 2.4 (very basic format without any additional information)
timestamp minimum (GMT)..................: 29.06.2021 08:13:54
timestamp maximum (GMT)..................: 29.06.2021 08:20:46
used capture interfaces..................: 1
link layer header type...................: DLT_IEEE802_11 (105)
endianess (capture system)...............: little endian
packets inside...........................: 29680
BEACON (total)...........................: 1
ACTION (total)...........................: 13
PROBERESPONSE............................: 1302
DEAUTHENTICATION (total).................: 25600
DISASSOCIATION (total)...................: 1
AUTHENTICATION (total)...................: 8
AUTHENTICATION (OPEN SYSTEM).............: 8
ASSOCIATIONREQUEST (total)...............: 2
ASSOCIATIONREQUEST (PSK).................: 1
WPA encrypted............................: 33
EAPOL messages (total)...................: 42
EAPOL RSN messages.......................: 42
ESSID (total unique).....................: 1
EAPOLTIME gap (measured maximum usec)....: 86191367
EAPOL ANONCE error corrections (NC)......: not detected
REPLAYCOUNT gap (measured maximum).......: 3
EAPOL M1 messages (total)................: 40
EAPOL M2 messages (total)................: 1
EAPOL M3 messages (total)................: 1
EAPOL pairs (total)......................: 2
EAPOL pairs (best).......................: 1
EAPOL pairs written to combi hash file...: 1 (RC checked)
EAPOL M32E2 (authorized).................: 1
Warning: too many deauthentication/disassociation frames detected!
That can cause that an ACCESS POINT change channel, reset EAPOL TIMER,
renew ANONCE and set PMKID to zero.
This could prevent to calculate a valid EAPOL MESSAGE PAIR
or to get a valid PMKID.
Warning: missing frames!
This dump file does not contain undirected proberequest frames.
An undirected proberequest may contain information about the PSK.
It always happens if the capture file was cleaned or
it could happen if filter options are used during capturing.
That makes it hard to recover the PSK.
session summary
---------------
processed cap files...................: 1[/color]is this normal if not how do i fix it?
RE: need help to convert .cap - LivinCorrupt - 06-29-2021
NVM i ended up getting the file i needed ty tho for the earlier replies
RE: need help to convert .cap - ZerBea - 06-29-2021
You (your attack tool) ran excessive deauthentications (25600) to get a single 4way handshake
Additional your dump tool removed some important frames.
So, what you did is not "normal" and the online converter informed you about that.
To get better results, improve your procedure and consider to use other tools to get a 4way handshake and/or a PMKID.
RE: need help to convert .cap - LivinCorrupt - 06-29-2021
(06-29-2021, 08:56 PM)ZerBea Wrote: You (your attack tool) ran excessive deauthentications (25600) to get a single 4way handshake
Additional your dump tool removed some important frames.
So, what you did is not "normal" and the online converter informed you about that.
To get better results, improve your procedure and your tools.
thank you for this info