WiFi WPA/WPA2 vs hashcat and hcxdumptool

[@davidbombal]

Apologies for the glitches in this video 😢 .... looks like the export of this video broke.... I had lots of issues uploading the original video to KZbin and had to export again quickly and it looks like something else broke. Hopefully won't happen again 😅 Big thanks to Cisco Meraki for sponsoring this video! Learn how to secure hybrid networks so you can stop these kinds of attacks: davidbombal.wiki/meraki Disclaimer: This video is for educational purposes only. I own all equipment used for this demonstration. No actual attack took place on any websites. Only use the tools demonstrated in this video on networks you have permission to attack. // MENU // 0:00 ▶ Introduction 1:32 ▶ Software used 2:17 ▶ WiFi Hardware used 3:15 ▶ Commands used 4:17 ▶ Install required software method 1 5:31 ▶ Install using Github 7:20 ▶ hcxdumptool demo using first Alfa adapter 9:15 ▶ Demonstration using second Alfa adapter 11:15 ▶ Real world example - a warning to all of us 13:45 ▶ Use hcxpcapngtool to set format correctly 17:24 ▶ Using hashcat with rockyou wordlist 18:38 ▶ Using hashcat with GPU and bruteforce // Previous Videos // Kali Wifi Adapters: kzbin.info/www/bejne/a36ypIxpi7N_gZo Old method using airmon-ng: kzbin.info/www/bejne/jZe8qaWCltafhJo Old method using GPUs: kzbin.info/www/bejne/gGmkaaWBe7-KY68 // COMMANDS // sudo systemctl stop NetworkManager.service sudo systemctl stop wpa_supplicant.service sudo hcxdumptool -i wlan0 -o dumpfile.pcapng --active_beacon --enable_status=15 sudo systemctl start wpa_supplicant.service sudo systemctl start NetworkManager.service hcxpcapngtool -o hash.hc22000 -E essidlist dumpfile.pcapng hashcat -m 22000 hash.hc22000 wordlist.txt Windows: hashcat.exe -m 22000 hash.hc22000 -a 3 ?d?d?d?d?d?d?d?d hashcat.exe -m 22000 hash.hc22000 -a 3 --increment --increment-min 8 --increment-max 18 ?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d // SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal KZbin: kzbin.info // MY STUFF // Monitor: amzn.to/3yyF74Y More stuff: www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [e-mail]

[@alleditzs10]

sir please create a video that how to install and setup the kali linux in windows please.🙏🙏🙏

[@cgmarch2359]

Pin your reply to be on top of comments :)

[@Idk-ql1in]

I thought my wifi is interrupted

[@Apluen]

what if the password is in the form of letters, can this method be used? as far as i know "?d?d?d?d?d?d?d?d?d?d" is numeric

[@NamkhanaaPhotography]

I want to be a student 🙏🙏

[@martinkrabbe5006]

David, I took your CCNA course on Udemy two years ago. Got my CCNA cert, did some security later on following your channel and others. I'm now got a job as a SOC analyst and I'm aiming at becoming a read teamer later on. You helped me get on track with this career. Thank you and keep up the amazing work!

[@H4R4K1R1x]

Great news

[@SushilKumar-dw1hf]

How much are you making in this field mate?

[@martinkrabbe5006]

@@H4R4K1R1x thank you 👍

[@martinkrabbe5006]

@@SushilKumar-dw1hf enough to live a good and healthy life tbh

[@ASHOKKUMAR-sf7sx]

Hii Sir I am Getting this errer "driver is not cfg80211 based and not useable" while running the command "sudo hcxdumptool -i wlan1 -o dumpfile.pcapng --active_beacon --enable_status=15"

[@JessieS]

David, when you are showing us some awesomeness there are never videos that are too long.

[@slowmosheet3367]

I second this opinion

[@tjj77598]

Thanks!

[@theRiver_joan]

Dude thank you for being so thorough and actually going through all the little steps. Excellent videos.

[@ASHOKKUMAR-sf7sx]

Hii Sir I am Getting this errer "driver is not cfg80211 based and not useable" while running the command "sudo hcxdumptool -i wlan1 -o dumpfile.pcapng --active_beacon --enable_status=15"

[@andreib3221]

Very good and complete explanation of hashcat. Better approach to collecting hashes this way then the classic disconnecting the client from the AP. Quite interested to see the next video with a bigger GPU or multiple GPUs or maybe even try to explain GPU clusters with Hashtopolis. Thanks!

[@ASHOKKUMAR-sf7sx]

Hii Sir I am Getting this errer "driver is not cfg80211 based and not useable" while running the command "sudo hcxdumptool -i wlan1 -o dumpfile.pcapng --active_beacon --enable_status=15"

[@jessehavlin1490]

​@@ASHOKKUMAR-sf7sx Idk if you've figured it out but it sounds like your adapter is not compatible. Hope you already have it figured out

[@AbhishekMishraabhirules27]

-o Option is Deprecated so use -w to get output file --active_beacon is also deprecated so use --beacontx=10 --enable_status is also not acceptable now, so I removed it Final Command sudo hcxdumptool -I wlan0 -w dumpfile.pcapng --beacontx=10

[@tjj77598]

I have the same issue

[@henriquedeveloper8101]

but is does not create the "dumpfile.pcapng" file

[@GorkaBajon]

this should work: sudo hcxdumptool -i wlan0mon -w dumpfile.pcapng -F --rds=1

[@W3AR3ANONYMOUS]

Absolutely.... The tool is updated

[@alienspace1]

This video needs an update

[@cadmiral3d146]

I love these videos. I appreciate you David.

[@davidbombal]

Very happy to hear that!

[@ahmadkhalidhotak4348]

Why does David doesnt answer my question?

[@slowmosheet3367]

@@ahmadkhalidhotak4348 u smell bad..

[@ahmadkhalidhotak4348]

@@slowmosheet3367 when you guys can't answer the question, something like that is supposed to be said by you awful guys.

[@slowmosheet3367]

@@ahmadkhalidhotak4348 geez man, chill out. I’m sure he has to read through hundreds of comments at a time and probably responds to the ones that he connects with and relates to most. Maybe make your comments better?

[@gungna]

Bro i literally just wanted to learn about password cracking and this comes up! Love your video as always david :3

[@ahmadkhalidhotak4348]

On this method i am able to retrieve the password of the wifi, but can't find the 8 digit PIN of the router like him. Can you explain why and how ?

[@Body_Model]

@@ahmadkhalidhotak4348 The 8 digit is the wireless password on the WIFI router. I think you are confusing yourself.

[@c0kain361]

Boy does this video bring back old memories. First hack I ever completed as a kid and where my love of hacking started. Good stuff man

[@slowmosheet3367]

this video was only made 2 months ago..

[@c0kain361]

@Caleb Looney yeah and they also used to be allot easier.

[@tiagosilveira3120]

David this video helped me a lot during a pentest with a client that uses a mesh WiFi network where airodump-ng doesn't worked as spected becuse every time i used a deauth attack, the device reconnect on a different access point and i was unable to get the handshake. Thanks a lot!!

[@Sarcasticyash69]

Seriously man if my parents ask how had you grown up - i would simply say David bombal name. Thanks man love you from India ❤❤❤❤

[@AutotechSavvy]

Been watching your videos for a few months and have learned a ton! I recently scored my first real full time I.T. contract for a corporate office.

[@pictbribe2187]

Hi, at 8:36, after i hit enter, i have this error : hcxdumptool: invalid option -- 'o', can someone help me @David Bombal. Thanks

[@zeekbrat3956]

I'm blessed by your work Sir. Your free unconditional teaching and knowledge you gave us has immensely rooted with in us. Seeing you new work every weeks gives me a desire that I want to learn ethical hacking and free myself.

[@nildesperandum2034]

TRASH

[@JasonBarnes-z7y]

Incredibly informative video! I noticed some of your hcxdumptool commands are now out of date for version 6.3.1. Do you have an updated video for the new version? Love your channel!

[@israeldayan4690]

Im so love your content #1👑, waiting for the video with the gpu😎

[@alisavaed5431]

Best teacher , really enjoyed and learned a lot . pls continue posting videos .

[@davidbombal]

Glad you like it! Thank you!

[@linuxdriver]

love the new way has been working on my pine apple nano andgot this all working

[@samratchapagain4804]

I learn wifi hacking technique 7 years ago but i didn't give continue on hacking skills. Thanks David for this video which helps me to revised all.

[@babynagnin4556]

Sir , I find only your videos much more convenient, useful , friendly with smooth English and simple explanation about the ethical hacking and so on topics . Thank you very much for teaching us so much amazing things !!

[@huxujie]

Can’t wait to see part 2 , very educational ! Great videos!

[@bravomanel]

he launched the part 2 ?

[@habibokal5639]

Hello David, can you please make a new video about the new and re-written hcxdumptool 6.3.x? Can you also show how to connect hashcat to another PC so they can work together with the Brain feature? Please please please 🙏🙏🙏🙏🙏🙏

[@MysticCloak-e9r]

Great Video Bombal Sir! Am in Class 8 and learning a great deal of things from ur vids! Thanks so much for the free information

[@kalokali7711]

Hi David, just to be sure at 8:23 u are showing list of cmds and there is --enable_status=1, but u're using --enable_status=15 in CLI, should we keep 1 or go with 15 (this is probably a typo)

[@davidbombal]

Go with 15 😀

[@MacFilme]

@@davidbombal thanks David

[@thee_black_AirBender]

was looking for this much needed reply

[@armendradahal480]

Just awesome. It works without any error in Kali Linux. But In windows it taking more time from hash software so I quit it. The adaptor which was showing at video. Already bought in one year ago I feel lucky to having this adaptor which is future on David Bombal channel. Thank you for the video.

[@davidbombal]

You're welcome and thank you for watching :)

[@kylergeston]

Great learning tutorial David. Did you ever do a video using a higher end GPU for doing more complex passwords that are using alpha-numeric as mentioned at 12:55 ? I would like to see how that scenario performs using this method.

[@abhinandanthour]

Hi David, at 8:44 when using the comand: "sudo hcxdumptool -i wlan0 -o dumpfile.pcapng --active_beacon --enable_status=15", do I stop the terminal or do I let it continue? After a couple of minutes it doesn't make any progress really andif I try to stop it I simply can't use ^C, nothing happens at all, if I close the terminal and open a new one any command I write connectivity related as, I believe, the wifi stops working, checking it, it says "NetworkManager is not running...", any advice?

[@ourstories9658]

@davidbombal Hi David, I have been following you for a while now and may I say what a wonderful job you are doing. Your content is top quality and easy for beginners to understand and grasp the fundamentals behind every topic you bring to us. I have a question David. I know I could probably Google it and find the answer but I would like help from my favourite online teacher 😁 Question: So with the old method of capturing the hash file we needed to put the network card in monitor mode. In your video I did not see you put the card into monitor mode? So with this new method as long as you have the required network card you don't need to put it in monitor mode! Is that right ? Thanks in advance 🎉

[@nickstasi6641]

Cisco I favour the willingness in sponsorship in content promotion in the spectrum shown here. I further liked to express thanks for sparking and fanning a flame thus leading to minds; possibly being intrigued then pursuing Sec+ filling voids. More essential minds able to elaborate what " online & privacy / security " means

[@xAngryDx]

I also want to wish you all the very best. Thank you for the amazing content David. God bless you.

[@bakedpotato7991]

man you are legend

[@BrainRape23]

hi david awesome vids but hcxdumptool changed can you do an updated video

[@SAR2325]

Thank you respected sir for your video. May I ask you two questions : - why you have to close two services before initiating the scan? Is it because you didn't want to have other packet exchanges when scan is running? - why did you used external wifi adapter. Why didn't you used built-in laptop wifi adapter? Thank you in advance.

[@michaelsaccone1224]

1) Running network services during the scan can cause packet interferences. 2) the external network card supports monitor mode and packets injection, which is required to capture the pcapng file

[@kentharris7427]

Excellent Video. I was able to recover passwords using your methods. I have an NVIDIA 3090 card, it is 5 times faster then a 1650 card. Still took two hours to recover a 10 numbered password however. Looking forward to your next video.

[@AggelosDRZ]

I did that tonight. I had some errors, but I found a way out. Well, the worldlist is your weapon. A big plus is that you can put your laptop in wifi scanning, take your laptop, and go around the block to find more essids and afterwards crack them all at once. The bigger the worldlist, the better 😅

[@abdusalamyahya789]

HI David, i learn a lot of knowledge from your video ....Abdulsalam Yahya from Libya

[@architech5940]

Btw, Ctr + Shift + V/C can be used for copy and paste on Linux machines. I see everyone manually copying and posting in these videos, so I thought I'd give a helping hand by potentially reducing the amount of work you have to do in order to do simple things like copy and paste. Also, it's worth mentioning that you can edit your nano config file to work like vim without annoying issues like saving and exiting file edits. With a little bash scripting, you can have nano working similar to vscode, or vim, if you'd like. The nano config file is located at /etc/.nanorc/. You can edit this file via sudo nano /etc/.nanorc/

[@walzwalzwalz]

I did the updates to hcxdumptool after running into issues with the 2200x hashes while doing a hashcat module on HackTheBox that required us to convert a pcap file. However, I had NO IDEA why the old hashes were depreciated. This is awesome! I hated all the things that needed to "line-up" previously to have a shot at cracking WPA2. It's so much easier to just dump the hashes into my hashcat rig haha

[@Alan-ps5iv]

Good video. Everything worked, I also compiled hashcat from the sources. However one of my 6 GPUs overheated after about 15 mins of cracking. 😬

[@GHBigBoss]

You are a great teacher, I really enjoy your videos

[@contactzspynerdoninstagram147]

Support team didn’t work! Tho Zspynerd ⬆️ unban my account permanently from tinder database!!

[@juliusrowe9374]

Great tutorial David!

[@SimonWilliams-c6g]

Hello I get the error : hcxdumptool : invalid option -- 'o' does anyone know why ? Thank's

[@gabriledyt]

Use --w

[@Similarminds-fg3te]

Your content is very nice, keep going, God willing, you will reach 5.000.000 All respect to you sir David Bombal🇵🇸I am from Palestine

[@diggerlenox]

Great video. Couldn't have come at a better time, iv been stuck on hashcat lately and wondered if you could use a handshake capture from wifite with hashcat after it's been converted obviously? Gave up with aircrack-ng and crunch after over 56 hours and over 2 billion keys tested.

[@MM-rs6tk]

Lmao! There’s going to be a lot of disappointment when people realize it’s not that easy.

[@01mememememe]

Just want to say thank you for all your videos, another great one David, you present it in an easily understandable format - hats off. What virtualization software (or is a cloud based instance) do you use from your Mac and is there a certain version of Kali Linux that you use if you don't mind answering while I wait for part two as it were with bigger GPU or multiple GPUs?

[@ASHOKKUMAR-sf7sx]

Hii Sir I am Getting this errer "driver is not cfg80211 based and not useable" while running the command "sudo hcxdumptool -i wlan1 -o dumpfile.pcapng --active_beacon --enable_status=15"

[@as_if0024]

Very complicated ...informative and Helpful

[@cobraviky2799]

Best teacher ( DAVID ) ,Thanks a lost of your Great video's -:)

[@ha-cn4wu]

Hello David! There a new version of dumptool.. would you consider updating your video accordingly or not really planned? Thx in advance

[@IchibanTech]

David does Alfa awus036acm has VIF or VIRTUAL INTERFACE can i use that in EVIL TWIN Attack? If yes which one is better to buy AWUS036ACM or AWUS036ACHM ??? Please reply David i really need your advise please🙏🙏🙏🥰

[@divine_swine9665]

This is an awesome video!

[@davidbombal]

Thank you!

[@NoviceStargazer]

@David Bombal Hello, If you leave the hcxdumptool running for a very long time in the same location(stationary/not walking around) it will it collect more/better information ? or after a few minutes will it have collected everything it possibly can ? or is it dependant on network activity ? CHeers very much

[@Xrayhabs]

Thank for sharing the knowledge

[@janekmachnicki2593]

Thank you for your Udemy Wireshark course and general for everything you have done towards IT knowledge .I hope i meet you somewhere in the Uk and get you a pint mate thanks.Ps I'm from Brum Jarek

[@tolgadogan7868]

Thanks David great Video

[@MangolikRoy]

Yayyy another way to crack something I waited for this so long.....

[@YLCGUK]

Thanks David. I deleted my previous comment as I wasn't paying attention! It's handy splitting the sniffing and cracking between Kali and Windows, I can put the VM on my laptop and remote to my gaming rig at home to crack. Perfect. Really good video, the adapter is coming tomorrow and I'm looking forward to playing!

[@YLCGUK]

rockyou + Base64 rule + RTX 3080 , it took me about 3 minutes of sniffing and less than 10 seconds of cracking to expose my password!

[@f11p11nk]

@@YLCGUK Do you have an example string on how you used Base64? Thanks.

[@אריאלנוילנדר]

Hi, grate video! with which software you are controlling the windows laptop from your Mac?

[@zibusisosiso-sibanda7649]

Awesome as always.... Really enjoyed and learned so much. Stay blessed

[@davidbombal]

Thank you very much! Really happy to hear that!

[@CyberDevilSec]

Hi David thanks for guiding me trough hascat and keeping me up to date (as always) Can you make a video about Beef next like netzorkchuck? But with port forwarding? Would be wonderful! Best teacher ever, never leave us please💕🔥

[@Onethingtosay]

David had u made that video with big GPU method ?

[@memomemo-cg9or]

can you please show us how to use big GPUs as you mentioned

[@ademaydemir_]

Hello David, greetings from Turkey, thank you for your videos tutorial

[@markHolmes81274]

Sorry, but I am just learning. I ran the command and it told me [ hcxdumptool: invalid option - “o”

[@MD-tr6sh]

Awesome video once again, And I should give this a go with my gaming laptop..

[@kylergeston]

Did you try this? And what were the results ?

[@najibrahim7042]

after the third step it gives me this error - "hcxdumptool: unrecognized option '--active_beacon'". could you do a remake / updated version of this video

[@barbarossa04]

+1

[@gcobanindzoyi4547]

Wow that's a lot of work, I even get lost at some point but I'll keep watching til I master it 😁

[@chodukamina]

Unable to start hcxdumptool showing error while making dumpfile.pcapng. The command sudo hcxdumptool -i wlan0 -o dumpfile.pcapng - - active_beacon - - enable_status=15

[@คนดีที่หนึ่ง-ม1ฎ]

I can't use hashcat in cmd in windows 10 it says insufficient space allocation, what to do? I use a notebook computer

[@RenLord46]

Please can you do a update version of this video? hcxdumptool change the commands

[@Gaming_Matrix001]

Sir I can't afford any strong adapter can't we do it using vmware directly if yes please guide us for the same

[@_swapnilff_9279]

MINDSET IS EVERYTHING

[@louiem5985]

That's was awesome video... I was trying to figure out what changed in hashcat. I will have to update my OS. Question for you since GPU are still expensive and hard to get where did you get yours?

[@m4nu3lex]

Hi David! great video!! just one inquiry. There is no need to place first the wireless adapter in monitor mode to run the hcxdumptool? thanks!

[@mlouryn]

Why could it be that --active_beacon does not work?

[@diggerlenox]

Great video as usual but correct me if I'm wrong. Using hcxdumptool without a filter will deauth everything around you so technically you have Dos your neighbours access points?

[@HorussRa]

The increment min and Max with (?d?d…) works also for alphanumeric?

[@matthewhumphries7436]

Hi David -E comes out as an invalid option….. any ideas?

[@scale...3d]

can you make a new and updated video on this topic and maybe using a simpler method? Earlier all we had to do was to convert the .cap file to hccapx and then feed it to hashcat using "-m 2500", but since that is deprecated, isn't there a similar straight forward way to do so?

[@jafri101]

Sir. That was usefull but if someone really want to crack his own password, if he forgets, should be buying adapter and gpu etc? I mean any simpler way?? Btw i appreciate you taught this way 😊

[@breakingthroughinside]

Love the tutorial, you are a great teacher!

[@AgborGordon]

while running the command "sudo hcxdumptool -i wlan1 -o dumpfile.pcapng --active_beacon --enable_status=15" it shows invalid option --''o''

[@g14br]

True

[@mandicvuk]

same

[@Mustafa-muhammed2]

Run it like this ( hcxdumptool -i wlanX -w dumpfile.pcapng ) and it will work

[@MZGaming-g2w]

@@Mustafa-muhammed2 it will filed with me "failed to get interface index: No such device" it say this evry time

[@elespon9647]

please help at 8:29 when entering the command hcxdumptool says invalid option -- 'o' edit: replace o with w, but a new error comes up saying --active_beacon is not recognized

[@redgreenbluedragon]

same

[@elespon9647]

@@redgreenbluedragon this tutorial no longer works, hashcat updated to v6.30 has new commands

[@AlonWeisman1]

-o Option is Deprecated so use -w to get output file --active_beacon is also deprecated so use --beacontx=10 --enable_status is also not acceptable now, so I removed it

[@JatoTunmise]

Which binary trading platform/broker is the best to use. Which one is your recommded one

[@Vlogboy_sk]

Hi , hello David sir ! How are you and your family ! After long time you post videos ! 😁

[@memozahran6395]

Can you please record a new video illustrating this method again as most of the commands no longer work due to updates in Kali Linux versions as well as hashcat commands

[@adityajoshi321]

Can we use the .cap file from wifite and convert it to .hc22000 using the same hcxpcapng tool? Or does the hcxpcapng tool work only with .pcapng files and not .pcap files?

[@keromedhat8779]

Hi sir i want know how u save the file from VMware to windows to hashcat

[@hee-HAW]

hashcat gives me an error "No hashes loaded" I captured the handshake using wifite and even tried with airgeddon but still hashcat won't run

[@arasharefe658]

prefect david

[@txxx9650]

Hi David, shows me that "driver is busy: failed to transmit internal beacon" what should I do?

[@millennialfreedom9137]

I got a message saying driver is busy: failed to transmit acknowledgment

[@markHolmes81274]

If I remove active beacon and remove enabled status it runs but it don’t look like yours

[@tonye.5661]

I have enjoyed your videos, they are very well structured and give great step by step instruction. I love to hack but watching your videos now I want to learn so much more! Thank you for your time!

[@dandavey293]

Hi David, when I run the hcxdumptool on kali the whole OS freezes and I end up restarting... are you aware of this issue? do you have any ideas on how I can move forward?

[@fredflintstoner596]

Mrs Richards: "I paid for a room with a view!" Basil: (pointing to the lovely view) "That is Torquay, Madam." Mrs Richards: "It's not good enough!" Basil: "May I ask what you were expecting to see out of a Torquay hotel bedroom window? Sydney Opera House, perhaps? the Hanging Gardens of Babylon? Herds of wildebeest sweeping majestically past?..." Mrs Richards: "Don't be silly! I expect to be able to see the sea!" Basil: "You can see the sea, it's over there between the land and the sky." Mrs Richards: "I'm not satisfied. But I shall stay. But I expect a reduction." Basil: "Why?! Because Krakatoa's not erupting at the moment ?"

[@IndustryOfMagic]

At 6:03 as the link to those dependencies is nowhere to be found. Maybe they're now integrated as part of latest v 6.3.1

[@fortheWisdom]

Very informational video tq so much ,sir. How do u use laptop screen on ur Mac?

[@davidbombal]

I use VNC

[@fortheWisdom]

@@davidbombal tx for reply sir

[@youngskeamz7270]

David please give us the guidelines on how to easy get use to pen testing as you do such amazing vidoe!

[@CM-xr9oq]

your question doesn't make sense

[@BG5850]

I get a error message saying hcxdumptool: invalid option - ‘o’