hcxtools "whoismac" command
#1
I'm trying to list all PMKIDs that were pulled with this command "hcxpcaptool hcxdump.pcapng -o hcxdump.hccapx -z PMKID -U usernames -P pmklist -E wordlist -T trafficlist -I identities". The problem I'm facing is I don't know the proper whoismac command that will list all the PMKIDs that were generated. I see a whoismac file in hcxtools folder but when I try to open it it shows a "cannot display error". So what whoismac command can I run to list all the PMKIDs and will I be able to view this PMKIDs?
Reply
#2
whoismac shows VENDOR informations about a given MAC. This can be a single MAC
-m <mac> : mac (six bytes of mac addr) or
: oui (fist three bytes of mac addr)

$ whoismac -m 14cc20000000
VENDOR: TP-LINK TECHNOLOGIES CO.,LTD.

or data from hashlines
-p <hashline> : input PMKID hashline
-P <hashline> : input EAPOL hashline from potfile

So, if you don't have a valid hashline, running whoismac on a hashline is useless for you.
Reply
#3
(02-03-2019, 05:51 PM)ZerBea Wrote: whoismac shows VENDOR informations about a given MAC. This can be a single MAC
-m <mac>      : mac (six bytes of mac addr) or
             : oui (fist three bytes of mac addr)

$ whoismac -m 14cc20000000
VENDOR: TP-LINK TECHNOLOGIES CO.,LTD.

or data from hashlines
-p <hashline> : input PMKID hashline
-P <hashline> : input EAPOL hashline from potfile

So, if you don't have a valid hashline, running whoismac on a hashline is useless for you.

Thank you this clarifies it for me.
Reply