hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
update on hcxpcaptool:
added support for gzip compressed cap/pcap/pcapng files.
new dependency: zlib!

$ hcxpcaptool -h
hcxpcaptool 4.0.2 (C) 2018 ZeroBeat
usage:
hcxpcaptool <options>
hcxpcaptool <options> [input.pcap] [input.pcap] ...
hcxpcaptool <options> *.cap
hcxpcaptool <options> *.*

options:
-E <file> : output wordlist (autohex enabled) to use as input wordlist for cracker
-I <file> : output identitylist
         : needs to be sorted unique
-P <file> : output possible WPA/WPA2 plainmasterkey list
-T <file> : output management traffic information list
         : european date : timestamp : mac_sta : mac_ap : essid
-A <file> : output nonce information list
         : european date : timestamp : mac_sta : mac_ap : message : replaycount : nonce
-S <file> : output EAPOL information list
         : european date : timestamp : mac_sta : mac_ap : message : replaycount : eapol_len : eapol
-H <file> : output dump raw packets in hex
-h        : show this help
-v        : show version

bitmask for message:
0001 M1
0010 M2
0100 M3
1000 M4


example:
$ hcxpcaptool test.pcap.gz
decompressing test.pcap.gz to /tmp/test.pcap.gz.tmp
start reading from /tmp/test.pcap.gz.tmp
summary:                                        
--------
file name..............: test.pcap.gz.tmp
file type..............: pcap 2.4
network type...........: DLT_IEEE802_11 (105)
endianess..............: little endian
read errors............: flawless
packets inside.........: 44572
skippedpackets.........: 0
probe requests.........: 3405
probe responses........: 5917
association requests...: 1534
reassociation requests.: 1322
EAPOL packets..........: 30593
EAP packets............: 1731
found..................: EAP type ID
found..................: EAP-TLS Authentication
found..................: EAP-Cisco Wireless Authentication
found..................: EAP-SIM (GSM Subscriber Modules) Authentication
found..................: EAP-TTLS Authentication
found..................: UMTS Authentication and Key Agreement (EAP-AKA)
found..................: PEAP Authentication
Reply


Messages In This Thread
RE: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats - by ZerBea - 01-14-2018, 04:04 PM
wlandump-ng vs hcxdumptool - by hulley - 02-10-2018, 10:26 PM