If 2 hccap of the same network are different password changed?

[goat]

If 2 hccap of the same network are different password changed?

I took an handshake a week ago and another today. The hccap files are different, I opened them with an editor.

Does it mean that the password changed?

[Mem5]

The password may have changed or not.

[ryley_angus]

I think it's possible for the password to be the same in both captures. My understanding is that when you try to associate with a network, the AP requests a specific and random challenge for the client to perform on the password. This prevents the client transmitting the password directly and as the challenge for the client varies, this prevents replay-style attacks in which you'd retransmit the captured response from the client.

So the two different challenges from the AP will cause differing sections in your hccap file, as will the unique responses from the client, even if the passwords are identical!

Please correct if I'm wrong!

[goat]

Ok, thank you!