After converting a dumpfile.pcapng to .22000 no record
#1
First of all I want to thank you all the hashcat team for the support to this fantastic set of tools.
Particularly I want to thank Zerbea for the unlimited patience to support people like me, that may be have to study more before to ask.
But after studying, what is the 4 way handshake, the RSN IE, after readind many of the documents of the forum that talk about this argument,  I was not able to understand, that's the reason that I am asking to the experts.

After,
sudo hcxdumptool -i wlxd03745123ff7 -o dumpfile.pcapng --active_beacon --enable_status=15
that captured about 78k of data.
hcxpcapngtool -o hash.hc22000 -E essidlist dumpfile.pcapng
record the essidlist file but no one record register in hash.hc22000.
But reading in wireshark the file I can read many EAPOL packet with RSN IE and PMKID fields.
What I need to investigate more.

.png   wireshark.png (Size: 376.66 KB / Downloads: 5)
Thank you once again
Giovanni

PS: It's possible to send a little donation to support your strong effort?
Reply


Messages In This Thread
After converting a dumpfile.pcapng to .22000 no record - by giogua6304 - 07-23-2024, 05:14 AM