NOTE: Why not use our List Manager to crack your lists? Its easy and enables better management.

NOTE: When cracking WPA/WPA2 passwords, make sure you check gpuhash.me first incase it's already been processed.

Home - Wireless Cracking - Separator unmatched on 16800 pmkid


3 Results - Page 1 of 1 -
1
Author Message
Avatar
ha$hed

Status: n/a
Joined: Sun, 07 Apr 2019
Posts: 1
Team:
Reputation: 0 Reputation
Offline
Sun, 07 Apr 2019 @ 02:13:20

I'm working on cracking a pmkid file. I have collected pcap file using bettercap.

Then convert using this:

hcxpcaptool -z bettercap-wifi-handshakes.pcap.pmkid bettercap-wifi-handshakes.pcap

They appear to convert:
summary:
file name....................: bettercap-wifi-handshakes.pcap
file type....................: pcap 2.4
file hardware information....: unknown
file os information..........: unknown
file application information.: unknown
network type.................: DLT_IEEE802_11_RADIO (127)
endianness...................: little endian
read errors..................: flawless
packets inside...............: 185
skipped packets..............: 0
packets with GPS data........: 0
packets with FCS.............: 6
beacons (with ESSID inside)..: 7
probe responses..............: 6
EAPOL packets................: 172
EAPOL PMKIDs.................: 10
best handshakes..............: 5 (ap-less: 0)

4 PMKID(s) written to bettercap-wifi-handshakes.pcap.pmkid

I then try to run hashcat against it and it returns "separator unmatched" for all of my entries. This is a simple 2 digit test below. What is going on here?

hashcat -m16800 -a3 -w3 bettercap-wifi-handshakes.pcap.pmkid %d%d --force
hashcat (v5.1.0-849-gcf8c815c) starting...

OpenCL Platform #1: The pocl project
Device #1: pthread-Intel(R) Xeon(R) CPU E5-2676 v3 @ 2.40GHz, 256/738 MB allocatable, 1MCU
Hashfile 'bettercap-wifi-handshakes.pcap.pmkid' on line 1 (048614...59a934d61726368303332382f322e34): Separator unmatched
Hashfile 'bettercap-wifi-handshakes.pcap.pmkid' on line 2 (947be6...d5bc0e1008b148e785*443542433045): Separator unmatched
Hashfile 'bettercap-wifi-handshakes.pcap.pmkid' on line 3 (4128f6...4b656e6e65792773204e6574776f726b): Separator unmatched
Hashfile 'bettercap-wifi-handshakes.pcap.pmkid' on line 4 (462f44...4b656e6e65792773204e6574776f726b): Separator unmatched


Avatar
capric0rnu$

Status: Trusted
Joined: Sat, 02 Apr 2016
Posts: 2955
Team:
Reputation: 2550 Reputation
Online
Sun, 07 Apr 2019 @ 02:24:12

give us yours PMKIDs


BTC:
1BPVJrzW1QyDtAqn4Lc4sPVagvd4SrNVpm

Avatar
freeroute
Moderator
Status: Trusted
Joined: Sat, 16 Jul 2016
Posts: 3005
Team:
Reputation: 9656 Reputation
Offline
Sun, 07 Apr 2019 @ 11:35:02

Note.
Hascat and hcxtools changed potfile, outfile and hashlines.
User should read changelog.

02.04.2019
==========
Due to hashcat changes:
"WPA/WPA2 cracking: In the potfile, replace password with PMK in order
to detect already cracked networks across all WPA modes"
https://github.com/hashcat/hashcat/commit/b8d609ba1604f4fed62198ae5000e205dcc87f70

hcxpcaptool: added new option -k to convert dumpfile to new hashcat PMKID format

new option -k is for hashcat git (> 5.1.0)
potfile changed
outfile changed

Developer pushed an update. Now hcxpacptool will give an info that PMKIDs are stored in old format!!



: 13hDMK85KhVnPb2eTFBacHD6kDjKYFLudb
XMPP: freeroute@xmpp.jp
General rules | Paid section rules


3 Results - Page 1 of 1 -
1

We have a total of 184233 messages in 22819 topics.
We have a total of 20554 registered users.
Our newest registered member is Sortuste.