need batch stop after pass found hccapx

[msalman]

hello i need command which will stop close batch after pass is found in hccapx file
currently i am using this command in batch when pass is found in passlist1 it still going on and on looking in next word lists
--remove not work with hccapx file

thx

64 -m 2500 -t 25 -o cracked.txt 1.hccapx pass/passlist1.txt
64 -m 2500 -t 25 -o cracked.txt 1.hccapx pass/passlist2.txt
64 -m 2500 -t 25 -o cracked.txt 1.hccapx pass/passlist3.txt

[WPA_Catcher]

I am no expert but I think something like this might work

64 -m 2500 -t 25 -o cracked.txt 1.hccapx pass/passlist1.txt
IF EXIST "cracked.txt" EXIT
64 -m 2500 -t 25 -o cracked.txt 1.hccapx pass/passlist2.txt
IF EXIST "cracked.txt" EXIT
64 -m 2500 -t 25 -o cracked.txt 1.hccapx pass/passlist3.txt

[slyexe]

It'll keep looking if you have more than one digest. Remove the other digest and you'll have no more issues. 

Example of a multicap file with 6 hashes: 

Session..........: hashcat
Status...........: Running
Hash.Type........: WPA-EAPOL-PBKDF2
Hash.Target......: capture.hccapx
Time.Started.....: Fri Jan 24 16:59:58 2020 (2 secs)
Time.Estimated...: Fri Jan 24 17:01:43 2020 (1 min, 43 secs)
Guess.Mask.......: 306?d?d?d?d?d?d?d [10]
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........:  289.1 kH/s (415.00ms) @ Accel:512 Loops:256 Thr:256 Vec:1
Recovered........: 3/6 (50.00%) Digests, 3/6 (50.00%) Salts
Progress.........: 0/60000000 (0.00%)
Rejected.........: 0/0 (0.00%)
Restore.Point....: 0/10000000 (0.00%)
Restore.Sub.#1...: Salt:0 Amplifier:0-1 Iteration:768-1024
Candidates.#1....: 3066199999 -> 3064305378
Hardware.Mon.#1..: Temp: 40c Fan: 25% Util:100% Core:2062MHz Mem:4104MHz Bus:16

[s]tatus [p]ause [b ]ypass [c]heckpoint [q]uit =>

For my example when I start this attack it states: 

INFO: Removed 3 hashes found in potfile.

If it had found all 6 hashes in the first attack it will not continue with the following attacks and halt.

[msalman]

i dont have multicap just 1 network

[slyexe]

i dont have multicap just 1 network

If thats the case, then after the password is found hashcat will stop.

[msalman]

it wont stop i have test multiple times it will go to next wordlist

[ZerBea]

Does it work with the example hash from here if the PSK is in passlist1.txt?
https://hashcat.net/misc/example_hashes/hashcat.hccapx

64 -m 2500 -t 25 --remove -o cracked.txt 1.hccapx pass/passlist1.txt
Is the hash removed?

How is your handshake converted (tool?) from the original cap file? Does it need nonce-error-corrections?

Did you read docs/status_codes.txt?

status codes on exit:
-2 = gpu-watchdog alarm
-1 = error
0 = OK/cracked
1 = exhausted
2 = aborted
3 = aborted by checkpoint
4 = aborted by runtime

Does your script evaluate them?

It should look like this:

Code:

ls -All
-rw-r--r-- 1 zerobeat users 393 27. Jan 17:31 hashcat.hccapx
-rw-r--r-- 1 zerobeat users  36 27. Jan 17:33 wordlist1.txt
-rw-r--r-- 1 zerobeat users  49 27. Jan 17:33 wordlist2.txt
-rw-r--r-- 1 zerobeat users  41 27. Jan 17:34 wordlist3.txt


$ hashcat --remove -m 2500 hashcat.hccapx *.txt
hashcat (v5.1.0-1628-g424a6ee8) starting...

Session..........: hashcat                     
Status...........: Exhausted
Hash.Name........: WPA-EAPOL-PBKDF2
Hash.Target......: 8381533406003807685881523 (AP:ae:f5:0f:22:80:1c STA:98:7b:dc:f9:f9:50)
Time.Started.....: Mon Jan 27 17:35:40 2020 (0 secs)
Time.Estimated...: Mon Jan 27 17:35:40 2020 (0 secs)
Guess.Base.......: File (wordlist1.txt)
Guess.Queue......: 1/3 (33.33%)
Speed.#1.........:      136 H/s (0.44ms) @ Accel:8 Loops:64 Thr:1024 Vec:1
Recovered........: 0/1 (0.00%) Digests
Progress.........: 4/4 (100.00%)
Rejected.........: 0/4 (0.00%)
Restore.Point....: 4/4 (100.00%)
Restore.Sub.#1...: Salt:0 Amplifier:0-1 Iteration:0-1
Candidates.#1....: 1qayxsw2 -> 7ujm,ki8
Hardware.Mon.#1..: Temp: 53c Fan: 40% Util: 41% Core:1544MHz Mem:5005MHz Bus:16


aef50f22801c:987bdcf9f950:8381533406003807685881523:hashcat!
                                               
Session..........: hashcat
Status...........: Cracked
Hash.Name........: WPA-EAPOL-PBKDF2
Hash.Target......: 8381533406003807685881523 (AP:ae:f5:0f:22:80:1c STA:98:7b:dc:f9:f9:50)
Time.Started.....: Mon Jan 27 17:35:40 2020 (1 sec)
Time.Estimated...: Mon Jan 27 17:35:41 2020 (0 secs)
Guess.Base.......: File (wordlist2.txt)
Guess.Queue......: 2/3 (66.67%)
Speed.#1.........:      187 H/s (0.39ms) @ Accel:8 Loops:64 Thr:1024 Vec:1
Recovered........: 1/1 (100.00%) Digests
Progress.........: 5/5 (100.00%)
Rejected.........: 0/5 (0.00%)
Restore.Point....: 0/5 (0.00%)
Restore.Sub.#1...: Salt:0 Amplifier:0-1 Iteration:0-1
Candidates.#1....: 123456789 -> 123456789
Hardware.Mon.#1..: Temp: 54c Fan: 40% Util: 62% Core:1708MHz Mem:5005MHz Bus:16

Started: Mon Jan 27 17:35:27 2020
Stopped: Mon Jan 27 17:35:42 2020

$ ls -All
-rw------- 1 zerobeat users  0 27. Jan 17:35  hashcat.hccapx
-rw-r--r-- 1 zerobeat users  36 27. Jan 17:33  wordlist1.txt
-rw-r--r-- 1 zerobeat users  49 27. Jan 17:33  wordlist2.txt
-rw-r--r-- 1 zerobeat users  41 27. Jan 17:34  wordlist3.txt

We never reach wordlist3.txt, because the PSK was recovered during second task.

[msalman]

1 = exhausted

[slyexe]

1 = exhausted

If it's running into exhausted then the password hasn't been found and it'll keep going thru your batch. Once it reaches cracked it'll stop as I previously mentioned.

[msalman]

the pass is in my first wordlist
11223344