How can i get hash from a cap file?
#1
I am interested in cracking 
I have 2 questions. 

Code:
1cd0af7899b382b86df801bd74237aab:f844e3f86819:48d2246b0794:KERATA2005:20052007

1)in this example there is a cracked wpa and i wonder 
is this "1cd0af7899b382b86df801bd74237aab" the hash?
and which format is this MD5, SHA-1, SHA-256, SHA-512
Can you explain this to me?


İf it is 
why no hash crack sites could not solve this  like

https://hashes.com/decrypt/basic

http://rainbowtables.it64.com/


2) how can i get hash from a cap file?


Thanks
Reply
#2
1)
depending on your hashcat version and hash mode it is either a PMKID or a MIC or a MD5_64 (ancient versions of hashcat).
The posted line is not the raw hash. Instead it is the result of hashcat.
Example hashes for all types are here (please use them, if you have questions - it is not allowed to post real hashes):
https://hashcat.net/wiki/doku.php?id=example_hashes

2)
depending on your hashcat version and hash mode:
hash mode 22000 (EAPOL + PMKID) running latest git head of hashcat
$ hcxpcapngtool -o test.22000 yourdumpfile.cap
or hash mode 16800 (PMKID) running latest release
$ hcxpcapngtool --pmkid=test.16800 yourdumpfile.cap
or hash mode 2500 (EAPOL) running latest release
$ hcxpcapngtool --hccapx=test.hccapx yourdumpfile.cap
Reply