+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html)
+--- Forum: General Help (https://hashcat.net/forum/forum-8.html)
+--- Thread: .cap file with more than one handshake - hccap, split (/thread-3194.html)
.cap file with more than one handshake - hccap, split - r0tati0n - 03-03-2014
I got hashcat and oclHashcat working on a Windows machine.
Furthermore I got a .cap file with a few WPA and WPA2 handshakes in there.
Questions:
1)
I can point hc and oclhc to the .cap file and it decrypts.
I thought I had to convert this file to a hccap, isnt this necessary?
How to i convert the file using a windows machine only?
2)
There is more than one handshake stored in the .cap file.
If I point hc to this cap is it decrypting all handshakes or just the first?
aircrack-ng asks me which one to decrypt, hc does not.
3)
How do I split the .cap file with many handshakes into multiple files with only one handshake? (Windows and Linux)
Thanks in Advance
RE: .cap file with more than one handshake - hccap, split - hawaii - 03-09-2014
Feeding a cap file to oclHashcat should error out.
You should be using the aircrack-ng "-J" argument to select single handshakes and output to hccap.