You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
3.3 KiB
3.3 KiB
# Wi-Fi Handshake Capture & Crack Cheatsheet
## Table of Contents
- [Preliminary Commands & Information Retrieval](#preliminary-commands--information-retrieval)
- [Capture & Conversion Phase](#capture--conversion-phase)
- [Additional Scans & Information](#additional-scans--information)
- [Cracking Phase](#cracking-phase)
- [5GHz Network Capturing Cheat Sheet](#5ghz-network-capturing-cheat-sheet)
## Preliminary Commands & Information Retrieval
### Secure Copy from Remote Device
```bash
scp -r root@172.16.42.1:/root/example.pcapng /home/username/Desktop
📖 Downloads files from remote devices using SCP.
Check Wireless Interfaces
iwconfig
📖 Displays wireless network interface details.
Kill Interfering Services
airmon-ng check kill
📖 Stops services that might interfere with wireless tools.
Capture & Conversion Phase
Set Wireless Card to Monitor Mode
sudo ip link set wlan0 down
sudo iw wlan0 set monitor control
sudo ip link set wlan0 up
# Set back to normal
ip link set wlan0mon down
iwconfig wlan0mon mode managed
ip link set wlan0 up
📖 Prepares the wireless card for capture.
Capture Handshakes with hcxdumptool
hcxdumptool -i wlan1 -o dumpfile.pcapng --active_beacon --enable_status=15 //OLD
hcxdumptool -i wlan1 -w dumpfile.pcapng --disable_deauthentication --disable_beacon //NEW
hcxdumptool -i wlan1 -w dumpfile.pcapng --disable_deauthentication --rds=1//NEW
📖 Captures packets from networks.
Convert Captured File for Hashcat
hcxpcapngtool -o hash.hc22000 -E essidlist dumpfile.pcapng
📖 Converts packets for password cracking.
Additional Scans & Information
Scan for Nearby Networks
hcxdumptool --do_rcascan -i wlan1
📖 Scans and displays nearby networks.
Cracking Phase
Crack with Hashcat
hashcat -m 22000 hash.hc22000 wordlist.txt
📖 Uses hashcat to attempt password cracks.
💡 sudo systemctl stop NetworkManager.service
💡 sudo systemctl stop wpa_supplicant.service
5GHz Network Capturing Cheat Sheet
1. Install Necessary Tools
sudo apt-get install hcxdumptool hcxtools
2. Check for 5GHz Support
iw list
3. Enable Monitor Mode
sudo ip link set wlan0 down
sudo iw dev wlan0 set type monitor
sudo ip link set wlan0 up
4. Set to 5GHz Channel
sudo iw dev wlan0 set channel 36
5. Identify Target Networks
sudo hcxdumptool -i wlan0 --scan
6. Capture Traffic
sudo hcxdumptool -i wlan0 --enable_status=1 -o output.pcapng --filterlist=filterlist.txt --filtermode=2
7. Analyze Captured Traffic
hcxpcaptool -z output.hccapx output.pcapng
8. Troubleshooting
- Check regulatory domain:
sudo iw reg get
sudo iw reg set US
- Check for nearby networks:
sudo iw dev wlan0 scan | grep -E '^(BSS|channel)'
- Check adapter capabilities:
iw list
9. Switch Back to 2.4GHz
sudo ip link set wlan0 down
sudo iw dev wlan0 set type monitor
sudo iw dev wlan0 set channel 6
sudo ip link set wlan0 up
10. List 2.4GHz Channels
iw phy phy0 channels
# or
iwlist wlan0 channel
Feel free to modify or add any additional information!