cap to hccapx problem [Zero value timestamps detected]
#4
The PMKID attack is described here:
https://hashcat.net/forum/thread-7717.html

hashmode 22000 is available by git head of hashcat, here:
https://github.com/hashcat/hashcat

How can i get hashes from wifislax files that i sent?
-> You should ask this question wifislax developers. I do not use wifislax.

But how can i use hashmode 22000 or 16800 with these files that i shared?
-> convert to PMKID+EAPOL, PMKID and/or hccapx:
$ hcxpcapngtool -o test.22000 --pmkid=test.16800 --hccapx=test.hccapx HAKAN-FC-4A-E9-14-EC-9B.cap

run hashcat to recover the PSK from PMKID
$ hashcat -m 16800 test.16800 wordlist

or run hashcat to recover the PSK from EAPOL (old school)
$ hashcat -m 2500 test.hccapx wordlist

or run latest hashcat to recover PSK from PMKID and EAPOL
$ hashcat -m 22000 test.22000 wordlist

Sometimes files is about 1kb so i cant convert these files to HCCAPX.
-> It depend on the quality of the cap file (frames inside the file) and not on its size.

People only use Wifislax. So this cap files i think cleaned files.
-> They are really missing something. Please read this:
https://hashcat.net/forum/thread-6661-po...l#pid47500

I suggest to read something about the basics of 802.11, too:
https://hashcat.net/forum/thread-6661-po...l#pid47204

and the advantages of the new hashformat, here:
https://hashcat.net/forum/thread-6661-po...l#pid47158
Reply


Messages In This Thread
RE: cap to hccapx problem [Zero value timestamps detected] - by ZerBea - 02-11-2020, 11:13 PM