security enabled verified medium v1.0.0

hcxpcaptool

Converts packet capture files to hash formats compatible with hashcat and john for WPA cracking.

📋 Live Preview 
hcxpcaptool -z {pmkid-output} {capture-file}
🌍 pmkid-output → hash.22000 🌍 capture-file → capture.pcapng 
hcxpcaptool -z {pmkid-output} {capture-file}

Sandbox: execFile · Timeout: 3600s

Capabilities

network.convert.capture
network.hash.extract
network.hash.pmkid
network.hash.eapol

Parameters

Name Type Required Default Description Aliases
pmkid string No - Output PMKID hashes (hashcat mode 22000) -z, --pmkid
output string No - Output file path -o, --output
essid-list string No - Extract ESSID list to file -E, --essid-list
identity string No - Extract identities to file -I, --identity
username string No - Extract usernames to file -U, --username
hashcat string No - Output hashcat format hashes -j, --hashcat
john string No - Output John the Ripper hashes -J, --john
pmkid-eapol string No - Output PMKID+EAPOL hashes -k, --pmkid-eapol
verbose boolean No - Enable verbose output -v, --verbose
h boolean No - Show this help -h, --help

Artifacts

TypeDescriptionMIMESchemaTrust
wireless.hash.22000Hashcat mode 22000 hash filetext/plain-verified
wireless.hash.johnJohn the Ripper hash filetext/plain-verified

Contract

Inputs

wireless.capture.file

Packet capture file (.pcap, .pcapng, .cap)

Outputs

wireless.hash.22000

Hashcat mode 22000 hashes

wireless.hash.john

John the Ripper hashes

wireless.essid.list

Extracted ESSID list

Side effects:

Workflow Edges

Produces

wireless.hash.22000wireless.hash.johnwireless.essid.list

Consumes

wireless.capture.file

Resource Profile

ResourceValue
CPUlow
Memory128 MB
Networknone
Disk I/Olow

Examples

Convert capture to hashcat mode 22000

hcxpcaptool -z hash.22000 capture.pcapng

Extract multiple hash formats

hcxpcaptool -z hash.22000 -j hash.john capture.pcapng

Extract ESSID list from capture

hcxpcaptool -E essids.txt capture.pcapng

Extract PMKID and identities

hcxpcaptool -z hash.22000 -I identities.txt capture.pcapng

Extract PMKID+EAPOL combined

hcxpcaptool -k combined.22000 capture.pcapng

Extract usernames from EAP

hcxpcaptool -U usernames.txt capture.pcapng

Verbose conversion

hcxpcaptool -v -z hash.22000 capture.pcapng

Full extraction of all data

hcxpcaptool -z hash.22000 -E essids.txt -I identities.txt -U usernames.txt capture.pcapng

Documentation

hcxpcaptool — Capture to Hash Converter

hcxpcaptool (part of hcxtools) converts WLAN packet captures into hash formats suitable for offline cracking with hashcat (mode 22000) and John the Ripper.

Supported Hash Formats

Format Flag Cracker
PMKID -z hashcat -m 22000
EAPOL -j hashcat -m 22000
PMKID+EAPOL -k hashcat -m 22000
John -J John the Ripper

Related Tools

hcxdumptoolhashcatjohn

References