hashcat Forum
need help to convert .cap - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: need help to convert .cap (/thread-10182.html)



need help to convert .cap - LivinCorrupt - 06-29-2021

Im getting 

Handshake Extraction Failed!
error opening file stats/ESSID.txt: Permission denied

not sure how to fix this


RE: need help to convert .cap - Snoopy - 06-29-2021

without your commandline used, noone can nor will help you,


RE: need help to convert .cap - ZerBea - 06-29-2021

Just received a notice from Atom:
https://hashcat.net/cap2hashcat/
permission problem should be fixed, now.


RE: need help to convert .cap - LivinCorrupt - 06-29-2021

(06-29-2021, 04:19 PM)ZerBea Wrote: Just received a notice from Atom:
https://hashcat.net/cap2hashcat/
permission problem should be fixed, now.

Thank you

so i got the file..  and when it converts it has warnings

 

Code:
[color=#000000]reading from 9959_1624982261.cap...

summary capture file
--------------------
file name................................: 9959_1624982261.cap
version (pcap/cap).......................: 2.4 (very basic format without any additional information)
timestamp minimum (GMT)..................: 29.06.2021 08:13:54
timestamp maximum (GMT)..................: 29.06.2021 08:20:46
used capture interfaces..................: 1
link layer header type...................: DLT_IEEE802_11 (105)
endianess (capture system)...............: little endian
packets inside...........................: 29680
BEACON (total)...........................: 1
ACTION (total)...........................: 13
PROBERESPONSE............................: 1302
DEAUTHENTICATION (total).................: 25600
DISASSOCIATION (total)...................: 1
AUTHENTICATION (total)...................: 8
AUTHENTICATION (OPEN SYSTEM).............: 8
ASSOCIATIONREQUEST (total)...............: 2
ASSOCIATIONREQUEST (PSK).................: 1
WPA encrypted............................: 33
EAPOL messages (total)...................: 42
EAPOL RSN messages.......................: 42
ESSID (total unique).....................: 1
EAPOLTIME gap (measured maximum usec)....: 86191367
EAPOL ANONCE error corrections (NC)......: not detected
REPLAYCOUNT gap (measured maximum).......: 3
EAPOL M1 messages (total)................: 40
EAPOL M2 messages (total)................: 1
EAPOL M3 messages (total)................: 1
EAPOL pairs (total)......................: 2
EAPOL pairs (best).......................: 1
EAPOL pairs written to combi hash file...: 1 (RC checked)
EAPOL M32E2 (authorized).................: 1

Warning: too many deauthentication/disassociation frames detected!
That can cause that an ACCESS POINT change channel, reset EAPOL TIMER,
renew ANONCE and set PMKID to zero.
This could prevent to calculate a valid EAPOL MESSAGE PAIR
or to get a valid PMKID.

Warning: missing frames!
This dump file does not contain undirected proberequest frames.
An undirected proberequest may contain information about the PSK.
It always happens if the capture file was cleaned or
it could happen if filter options are used during capturing.
That makes it hard to recover the PSK.


session summary
---------------
processed cap files...................: 1[/color]

is this normal if not how do i fix it?


RE: need help to convert .cap - LivinCorrupt - 06-29-2021

NVM i ended up getting the file i needed ty tho for the earlier replies


RE: need help to convert .cap - ZerBea - 06-29-2021

You (your attack tool) ran excessive deauthentications (25600) to get a single 4way handshake
Additional your dump tool removed some important frames.

So, what you did is not "normal" and the online converter informed you about that.
To get better results, improve your procedure and consider to use other tools to get a 4way handshake and/or a PMKID.


RE: need help to convert .cap - LivinCorrupt - 06-29-2021

(06-29-2021, 08:56 PM)ZerBea Wrote: You (your attack tool) ran excessive deauthentications (25600) to get a single 4way handshake
Additional your dump tool removed some important frames.

So, what you did is not "normal" and the online converter informed you about that.
To get better results, improve your procedure and your tools.

thank you for this info