Run wlandump-ng or hcxdumptool for some days. With a little luck, a PSK or a PMK is inside the captured file.
Read this complete thread. Everything is explained inside (including examples).
But why do you need a PMK? A PMK is useless for you!
Read this complete thread. Everything is explained inside (including examples).
But why do you need a PMK? A PMK is useless for you!