hashcat Forum
.cap file with more than one handshake - hccap, split - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html)
+--- Forum: General Help (https://hashcat.net/forum/forum-8.html)
+--- Thread: .cap file with more than one handshake - hccap, split (/thread-3194.html)



.cap file with more than one handshake - hccap, split - r0tati0n - 03-03-2014

I got hashcat and oclHashcat working on a Windows machine.
Furthermore I got a .cap file with a few WPA and WPA2 handshakes in there.


Questions:

1)
I can point hc and oclhc to the .cap file and it decrypts.
I thought I had to convert this file to a hccap, isnt this necessary?
How to i convert the file using a windows machine only?

2)
There is more than one handshake stored in the .cap file.
If I point hc to this cap is it decrypting all handshakes or just the first?
aircrack-ng asks me which one to decrypt, hc does not.

3)
How do I split the .cap file with many handshakes into multiple files with only one handshake? (Windows and Linux)


Thanks in Advance


RE: .cap file with more than one handshake - hccap, split - hawaii - 03-09-2014

Feeding a cap file to oclHashcat should error out.

You should be using the aircrack-ng "-J" argument to select single handshakes and output to hccap.