+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: hcxtools "whoismac" command (/thread-8123.html)
hcxtools "whoismac" command - Bully0423 - 02-03-2019
I'm trying to list all PMKIDs that were pulled with this command "hcxpcaptool hcxdump.pcapng -o hcxdump.hccapx -z PMKID -U usernames -P pmklist -E wordlist -T trafficlist -I identities". The problem I'm facing is I don't know the proper whoismac command that will list all the PMKIDs that were generated. I see a whoismac file in hcxtools folder but when I try to open it it shows a "cannot display error". So what whoismac command can I run to list all the PMKIDs and will I be able to view this PMKIDs?
RE: hcxtools "whoismac" command - ZerBea - 02-03-2019
whoismac shows VENDOR informations about a given MAC. This can be a single MAC
-m <mac> : mac (six bytes of mac addr) or
: oui (fist three bytes of mac addr)
$ whoismac -m 14cc20000000
VENDOR: TP-LINK TECHNOLOGIES CO.,LTD.
or data from hashlines
-p <hashline> : input PMKID hashline
-P <hashline> : input EAPOL hashline from potfile
So, if you don't have a valid hashline, running whoismac on a hashline is useless for you.
RE: hcxtools "whoismac" command - Bully0423 - 02-03-2019
(02-03-2019, 05:51 PM)ZerBea Wrote: whoismac shows VENDOR informations about a given MAC. This can be a single MAC
-m <mac> : mac (six bytes of mac addr) or
: oui (fist three bytes of mac addr)
$ whoismac -m 14cc20000000
VENDOR: TP-LINK TECHNOLOGIES CO.,LTD.
or data from hashlines
-p <hashline> : input PMKID hashline
-P <hashline> : input EAPOL hashline from potfile
So, if you don't have a valid hashline, running whoismac on a hashline is useless for you.
Thank you this clarifies it for me.