hcxtools
A suite of tools to convert WiFi packet captures to hash files for password cracking with Hashcat or John the Ripper.
What is hcxtools?
hcxtools is a collection of Linux command-line utilities that convert WiFi packet capture files into hash formats for password cracking tools like Hashcat and John the Ripper. It focuses on extracting WPA-PBKDF2-PMKID and EAPOL handshake hashes to analyze WiFi network security and detect weak passwords or vulnerabilities.
Security researchers, penetration testers, and network administrators with advanced knowledge of WiFi protocols (802.11), Linux systems, and password cracking methodologies.
hcxtools offers a specialized, Hashcat-endorsed toolset for precise hash extraction and conversion, supporting the latest hash modes (e.g., 22000) and providing detailed analysis capabilities unmatched by generic packet tools.
Overview
A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.
Use Cases
Best For
- Converting WiFi packet captures to Hashcat-compatible hash files
- Extracting PMKID hashes for offline WPA/WPA2 password auditing
- Analyzing WiFi network vulnerabilities for weak key transmission
- Filtering and processing hash files to identify weak password candidates
- Integrating with hcxdumptool for a complete WiFi security assessment workflow
- Preparing hash files for use with common wordlists in password recovery
Not Ideal For
- Users requiring a graphical interface for WiFi packet analysis and hash conversion
- Teams without advanced knowledge of 802.11 protocols, Linux command-line, and cryptographic key derivation
- Projects that demand cross-platform compatibility on Windows or macOS
- Scenarios where an all-in-one suite with integrated password cracking is needed
Pros & Cons
Pros
Officially endorsed by Hashcat, ensuring full compatibility with hash modes like 22000 for efficient password recovery, as stated in the README.
Extracts both PMKID and EAPOL handshake hashes, enabling thorough vulnerability assessment of WiFi networks for weak key transmission.
Includes hcxhashtool and hcxpsktool to filter hash files and identify weak password candidates, enhancing analysis precision.
Supports gzip-compressed capture files and converts between formats like PMKID&EAPOL to cap, offering workflow versatility.
Cons
Requires in-depth understanding of radio technology, 802.11 protocols, and Linux, as explicitly stated in the Requirements section, making it inaccessible to novices.
Only works on Linux with kernel >=5.10, and unsupported on Windows, macOS, or emulators, restricting deployment options.
Does not perform nonce error corrections, so packet loss during capture can lead to incorrect hash generation and failed cracking attempts.
Frequently Asked Questions
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.