hcxtools - solution for capturing wlan traffic and conversion to hashcat formats
lets say I run hcxdumptool (aggressively) on a one hour timer, after one hour I hard close hcxdumptool. Then I start hcxdumptool for another hour capture. I am left with two cap files, hour1.cap and hour2.cap. I did not move location so a large chunk of handshakes are from the same clients/AP. Quite a bit of overlap.

My goal is one hccapx without dupes for that day, should I:

Method 1
1. hcxpcaptool -o allday.hccapx hour1.cap hour2.cap

Method 2
1. cat hour1.cap hour2.cap > full.cap
2. hcxpcaptool -o allday.hccapx full.cap

Method 3
1. wlancap2hcx -p full.cap hour1.cap hour2.cap
2. hcxpcaptool -o allday.hccapx full.cap

I am currently using method 3, but I would like to use method 1. Does hcxpcaptool -o combine and compare all caps for the "best" handshakes?
Reply


Messages In This Thread
wlandump-ng vs hcxdumptool - by hulley - 02-10-2018, 10:26 PM
RE: hcxtools - solution for capturing wlan traffic and conversion to hashcat formats - by taxil - 05-16-2018, 11:37 PM