Posts: 25
Threads: 5
Joined: Jan 2019
I'm trying to list all PMKIDs that were pulled with this command "hcxpcaptool hcxdump.pcapng -o hcxdump.hccapx -z PMKID -U usernames -P pmklist -E wordlist -T trafficlist -I identities". The problem I'm facing is I don't know the proper whoismac command that will list all the PMKIDs that were generated. I see a whoismac file in hcxtools folder but when I try to open it it shows a "cannot display error". So what whoismac command can I run to list all the PMKIDs and will I be able to view this PMKIDs?
Posts: 1,042
Threads: 2
Joined: Jun 2017
whoismac shows VENDOR informations about a given MAC. This can be a single MAC
-m <mac> : mac (six bytes of mac addr) or
: oui (fist three bytes of mac addr)
$ whoismac -m 14cc20000000
VENDOR: TP-LINK TECHNOLOGIES CO.,LTD.
or data from hashlines
-p <hashline> : input PMKID hashline
-P <hashline> : input EAPOL hashline from potfile
So, if you don't have a valid hashline, running whoismac on a hashline is useless for you.
Posts: 25
Threads: 5
Joined: Jan 2019
(02-03-2019, 05:51 PM)ZerBea Wrote: whoismac shows VENDOR informations about a given MAC. This can be a single MAC
-m <mac> : mac (six bytes of mac addr) or
: oui (fist three bytes of mac addr)
$ whoismac -m 14cc20000000
VENDOR: TP-LINK TECHNOLOGIES CO.,LTD.
or data from hashlines
-p <hashline> : input PMKID hashline
-P <hashline> : input EAPOL hashline from potfile
So, if you don't have a valid hashline, running whoismac on a hashline is useless for you.
Thank you this clarifies it for me.