hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
#49
How to convert hccapx back to cap:

cap2hccapx and wlancap2hcx don't convert the following message pairs:
MESSAGE_PAIR_M32E3 3
MESSAGE_PAIR_M32E3 131
MESSAGE_PAIR_M34E3 4
MESSAGE_PAIR_M34E3 132
because conversation from hccapx to cap is not lossless and this types can't be converted back.

Both tools writing instead the message pairs
MESSAGE_PAIR_M32E2 2
MESSAGE_PAIR_M32E2 130
MESSAGE_PAIR_M34E4 5
MESSAGE_PAIR_M34E4 133
to a hccapx file.

So it's possible to convert a hccapx file back to a cap file:
wlanhcx2cap -i test.hccapx -o test.cap -m 40

Option -m means that max. 40 different cap files are written (depending on total number of nets in the hccapx):
each cap file contains only one combination of
mac_ap, mac_sta, ESSID per network.

For example: http://wpa-sec.stanev.org/? will accept this back-converted caps.
Reply


Messages In This Thread
RE: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats - by ZerBea - 08-17-2017, 08:11 PM
wlandump-ng vs hcxdumptool - by hulley - 02-10-2018, 10:26 PM