+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Crack WPA2 (.hc22000 file) with list not completing (/thread-10496.html)
Crack WPA2 (.hc22000 file) with list not completing - Joe_Baker - 12-02-2021
I have a WPA2 hash file .hc22000 (so mode 22000) but when I try to find the password located in a small list of 5 words it just keeps running but doesn't complete it. I let the command run for an hour before closing it, it kept loading on "Initializing backend runtime for device #1. Please be patient...". I'm using the command:
"hashcat -a 0 -m 22000 hashfile.hc22000 wordlist.txt". Does someone have experience with these .hc22000 files or maybe something wrong with my command?
The hash looks like following:
"WPA*02*<bunch of letters and numbers with a * from time to time>*02"
Text file looks like following:
"
RandomWord
anotherRandomWord
password
notMyPassword
another
"
The command is running when I'm in the folder of hashcat (hashcat-6.2.5) and the files used are located in this folder as well. I get no error codes except "nvmlDeviceGetFanSpeed(): Not Supported" but this shouldn't be an issue from what I've read.
I'm using a i7-9750h and RTX2060 so you would expect that it wouldn't take that long to get a hash from a 5 word long list (let alone a huge list like rockyou).
P.S. I'm new to hashcat so it's possible I'm missing some obvious steps.
RE: Crack WPA2 (.hc22000 file) with list not completing - v71221 - 12-08-2021
Try to play with -D option.
At first, to show info about detected backend devices, run
hashcat.exe -IThen choose your device.
In my case
-D 1 means use CPU, works!
-D 2 means use GPU, doesn't work, Device #2: Not enough allocatable device memory for this attack.
For simplicity, you can enter the hash and password directly into the command line.
hashcat.exe -D 1 -a 3 -m 22000 "WPA*01*4d4fe7aac3a2cecab195321ceb99a7d0*fc690c158264*f4747f87f9f4*686173686361742d6573736964***" "hashcat!"It takes about 16 minutes in my case and it works. Status: Cracked
This is an example hash you can find here:
https://hashcat.net/wiki/doku.php?id=example_hashes
or just
hashcat.exe -m 22000 --example-hashesBy the way, I'm also new to hashcat.
I'm using Windows and a 10-year-old laptop with an Intel Celeron CPU and an Intel GPU.
I was not able to use hashcat on Linux. Every time I got an "illegal hardware instruction" error.
Now the fun part.
pmkid-hash (format .hc22000) from real dump (captured by hcxdumptool) is not cracked. Status: Exhausted
eapol-hash (format .hc22000) from the same real dump is cracked. Status: Cracked
So far I have not been able to crack pmkid.
I tried wordlist attack, brute-force attack, different dumpfiles, however result is the same. Status: Exhausted
I can crack eapol-hash, but something wrong with pmkid-hash. May be the main reason is my weak hardware.
Please answer what status you saw when you ran the commands below on your hardware. Cracked or Exhausted ?
hashcat.exe -D 1 -a 3 -m 22000 "WPA*01*f8dc238fb156874627b5ff251b8ab53c*020000000001*020000000020*61703031***" "12345678"
hashcat.exe -D 1 -a 3 -m 22000 "WPA*02*6ec572e97e2ede5a6099bf964fa880fd*020000000001*020000000020*61703031*013ebd2420f2dedcfb7ad5cf967c902c5f40031574352a492e809b58b0e74e4a*0103007502010a00000000000000000000f97e365fcdcfcf2ccb91fa35c25c345eaf34b638c15926eb43a1cc78876d7c86000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac023c00*02" "12345678"Explanation of the hc22000 hash line you can find here
https://hashcat.net/wiki/doku.php?id=cracking_wpawpa2
Please read this post as an example of troubleshooting of dictionary attack.
https://hashcat.net/forum/thread-8602.html
RE: Crack WPA2 (.hc22000 file) with list not completing - ZerBea - 12-08-2021
Now the fun part.
pmkid-hash (format .hc22000) from real dump (captured by hcxdumptool) is not cracked. Status: Exhausted
eapol-hash (format .hc22000) from the same real dump is cracked. Status: Cracked
Indeed funny, but related to 802.11 attack mode and conversion mode:
PMKID retrieved from ACCESS POINT.
EAPOL MESSAGE PAIR retrieved from CLIENT M2.
It the CLIENT is authorized, the PSK should be the same on both. If not, you'll get two different PSKs. The same will happen if the PSK is changed during capturing time.
(BTW: both MACs look very synthetic - which let me assume that you're running a test environment)
By default hcxdumptool/hcxlabtool attack both (AP and CLIENT) and hcxpcapngtool convert everything.
All tools are analysis tools and it is mandatory that you know what you are doing (choosing the attack vector, converting the hash, selecting the desired hash to feed hashcat). Otherwise the result will be completely unexpected.
RE: Crack WPA2 (.hc22000 file) with list not completing - v71221 - 12-08-2021
@ZerBea
Thank you for your prompt reply. Yes, I am a newcomer, diligently studying hcxdumptool/hcxtools and using a test environment. Three notebooks with wifi-adapters, 1st with Linux and hcxdumptool/hcxtools, 2nd with Windows as wifi access point, and 3rd with Windows as client. For clarity and readability I changed MACs on AP and CLIENT.
AP is created by these commands on Windows 7
netsh wlan set hostednetwork mode=allow ssid=ap01 key=12345678 keyUsage=temporary
netsh wlan start hostednetworkI ran this command to capture AP-CLIENT session.
$ sudo hcxdumptool -i wlan0 -o dump.pcapng --silent --enable_status=127 -c 1I used silent "passive" mode because client hung if I ran hcxdumptool in "active" mode.
Could you kindly provide me with "proper" syntax of hcxdumptool options if I'm targeting PMKID only.
By the way, I noticed that
hcxhash2cap with option "--pmkid=" gives an error "reading hash line 1 failed".
hcxhash2cap with option "--pmkid-eapol=" works fine.
Input file in both cases is the same one-line-file pmkid.22000
$ hcxhash2cap --pmkid=pmkid.22000 -c test.cap
reading hash line 1 failed: WPA*01*f8dc238fb156874627b5ff251b8ab53c*020000000001*020000000020*61703031***
$ hcxhash2cap --pmkid-eapol=pmkid.22000 -c test2.cap
PMKIDs/EAPOL messages written to capfile(s): 1 (0 skipped)RE: Crack WPA2 (.hc22000 file) with list not completing - ZerBea - 12-08-2021
--pmkid option is for old 16800 hash lines. It will give an ERROR on hc22000 files.
By latest commit:
https://github.com/ZerBea/hcxtools/commit/9e118e11672cd8c3933d2fb194372f342a6f71ad
I added an additional information to --help:
Video Title Ararity Thedongkinger Link !!top!! -
The Ultimate Guide to Video Title Optimization: Unlocking the Power of "Video Title Ararity Thedongkinger Link"
In the vast and ever-competitive world of online video content, standing out from the crowd is a daunting task. With millions of videos vying for attention on platforms like YouTube, Vimeo, and social media, it's essential to craft a compelling title that captures viewers' attention and drives engagement. One crucial element in optimizing your video title is incorporating a strategic keyword: "video title ararity thedongkinger link." In this article, we'll explore the significance of this keyword and provide actionable tips on how to leverage it to boost your video's visibility.
Understanding the Importance of Video Titles
Your video title is the first thing viewers see when browsing for content online. It's a make-or-break moment that determines whether they'll click on your video or scroll past it. A well-crafted title not only entices viewers but also helps search engines understand the content and relevance of your video. This is where keywords come into play.
The Significance of "Video Title Ararity Thedongkinger Link"
So, what makes "video title ararity thedongkinger link" such a valuable keyword? The phrase itself may seem unusual, but its components hold significant relevance:
- Video title: This phrase directly relates to the topic at hand: optimizing video titles for better visibility.
- Ararity: This term implies uniqueness and scarcity, suggesting that the content is exclusive or hard to find.
- Thedongkinger: Although seemingly obscure, this term might be related to a specific niche or community, adding context to the keyword.
- Link: The inclusion of "link" implies a call-to-action, encouraging viewers to click and engage with the content.
When combined, these words create a powerful keyword phrase that can help your video stand out in search results and attract the right audience.
Optimizing Your Video Title with "Video Title Ararity Thedongkinger Link"
Now that we've established the importance of this keyword, let's dive into actionable tips on how to incorporate it into your video title:
- Use the keyword strategically: Place "video title ararity thedongkinger link" at the beginning of your title, if possible. This will increase its visibility and impact on search engine algorithms.
- Make it descriptive and concise: Ensure your title accurately reflects the content and is easy to understand. Aim for a length of 5-7 words to avoid truncation in search results.
- Add relevant context: Include additional keywords or phrases related to your content, but avoid keyword stuffing. This will help search engines understand the broader context of your video.
- Use attention-grabbing elements: Incorporate emotional triggers, questions, or statements that pique viewers' curiosity and encourage clicks.
Examples of Effective Video Titles
Here are some examples of video titles that successfully incorporate the keyword "video title ararity thedongkinger link":
- "Unlock the Secret: Video Title Ararity Thedongkinger Link Revealed!"
- "The Ultimate Guide to Video Title Ararity Thedongkinger Link Optimization"
- "Rarity Alert: Discover the Power of Video Title Thedongkinger Link"
Best Practices for Video Title Optimization
To maximize the effectiveness of your video title, keep the following best practices in mind:
- Conduct keyword research: Use tools like Google Keyword Planner, Ahrefs, or SEMrush to analyze the performance and relevance of your target keyword.
- Test and iterate: Experiment with different title variations to see which ones perform better in terms of views, engagement, and click-through rates.
- Keep it fresh: Update your title periodically to reflect changes in your content, audience preferences, or search engine algorithms.
- Use eye-catching thumbnails: Pair your optimized title with a visually appealing thumbnail that complements the content and grabs viewers' attention.
Conclusion
In the competitive world of online video content, a well-crafted title can make all the difference. By incorporating the keyword "video title ararity thedongkinger link" and following best practices for video title optimization, you can increase your video's visibility, drive engagement, and attract the right audience. Remember to stay creative, experiment with different title variations, and keep your content fresh to maximize the impact of your video title.
Additional Resources
For more information on video title optimization and keyword research, check out these resources:
- YouTube's official guide to video titles and tags
- Ahrefs' keyword research tutorial
- SEMrush's video SEO guide
By applying the strategies and best practices outlined in this article, you'll be well on your way to creating video titles that capture attention, drive engagement, and propel your content to new heights.
"NEW VIDEO ALERT!
Check out the latest video from [channel name]: "Video Title"!
You can watch it here: [link to video]
Also, be sure to check out Ararity and TheDongKinger for more awesome content!
#VideoTitle #Ararity #TheDongKinger #Gaming #NewVideo"
However, I want to let you know that I don't have any information on "Ararity" and "TheDongKinger". Can you provide more context or information about who or what they are? That way I can create a more informed and engaging post.
Also, what is the "Video Title" about? Is it a gaming video, music video, or something else? This will help me create a more accurate and enticing post.
Let me know and I'll be happy to help!
To help you create "solid text" based on the details you provided, I have structured it into a clear, professional video description format suitable for platforms like YouTube. Video Title: Ararity TheDongKinger Watch here
(Note: Ensure this is the correct direct link to the specific video). Video Description [Intro/Hook] Experience the world of , the latest project from TheDongKinger
. This video dives deep into [insert specific theme, e.g., gameplay, cinematic storytelling, or creative design], pushing the boundaries of [insert genre/topic]. [Key Highlights] Unique Vision
: A fresh look at [Topic] through the eyes of TheDongKinger. Cinematic Quality : High-definition visuals paired with a custom soundscape. Behind the Scenes : Stay tuned to see how came to life. [Call to Action] If you enjoyed this look at , don't forget to: the video if you found it interesting. TheDongKinger for more unique content and future updates. below: What was your favorite part of the video? Social & Support TheDongKinger YouTube
The search query "video title ararity thedongkinger link" appears to be a specific string of keywords rather than a traditional topic. If you are a content creator looking to leverage these keywords for a high-ranking blog post or video description, you need to structure your content to maximize search engine optimization (SEO) while remaining engaging for readers.
This comprehensive guide breaks down how to turn specific, competitive, or long-tail keywords into a high-performing article. The Power of Long-Tail Keywords in Digital Marketing
Long-tail keywords are highly specific search queries that typically contain three or more words. While they may boast lower individual search volumes compared to broad terms, they are incredibly valuable for creators and businesses alike. Why Long-Tail Keywords Matter
Lower Competition: Broad terms are heavily fought over by major media outlets. Long-tail keywords give smaller creators a chance to rank on the first page of search engines.
Higher Intent: Users searching for specific strings are usually looking for a exact answer, product, or video.
Better Conversion Rates: Because the search is targeted, the traffic you pull in is far more likely to engage with your link, subscribe to your channel, or buy your product. Step-by-Step: How to Write an Article Around This Keyword
If your goal is to rank for the exact phrase "video title ararity thedongkinger link", you must build a content framework that seamlessly integrates the text while delivering genuine value to your reader. 1. Hook the Reader with an Optimized Title
Your title needs to include your exact target keyword while still sounding natural and enticing to a human reader.
Example Title: How to Find the Exact Video Title Ararity Thedongkinger Link Without Getting Lost in the Search Results. 2. Craft a Strong Introduction
Start your article by acknowledging what the user is looking for in the first sentence.
Example Intro: If you have been searching endlessly for the specific video title ararity thedongkinger link, you are not alone. Navigating the depths of modern search engines to find exact video assets can be highly frustrating. In this article, we will break down exactly how to locate hard-to-find links and optimize your own digital footprint. 3. Provide Context and Value
Never just repeat the keyword over and over—this is known as "keyword stuffing" and search engines will penalize your site for it. Instead, build helpful sections around the concepts mentioned in your query.
The "Video Title" Factor: Discuss how clear, searchable video titles are the backbone of algorithmic discovery on platforms like YouTube or TikTok.
The "Link" Factor: Explain the importance of safe browsing. Warn your readers never to click on suspicious or unverified links from unknown search returns. Best Practices for Directing Users to Links Safely
Since the keyword explicitly asks for a link, your article should educate users on how to handle external links safely on the internet.
Verify the Source: Before clicking on any link generated by a search engine, hover over the URL to see where it actually leads.
Look for HTTPS: Ensure the site you are visiting has a secure connection (look for the padlock icon in your browser's address bar).
Use Link Shorteners Wisely: Content creators often use shortened links to save space. However, as a consumer, be cautious of clicking shortened links from untrusted sources. Advanced SEO Tips for Creators
If you are trying to make your own content rank for specific strings like this, follow these quick rules:
Use H2 and H3 Headings: Break your article up. Search engine crawlers use headings to understand the hierarchy of your content.
Optimize Your Meta Description: Write a short, 150-character summary of your page featuring the keyword. This is what users will see on the search results page. video title ararity thedongkinger link
Insert Internal Links: Link this new article to older, relevant posts on your website to share authority and keep users on your site longer.
Decoding the Mystery: "Video Title Ararity TheDongKinger Link" – Everything You Need to Know
In the fast-evolving landscape of digital content, certain keywords occasionally surge in popularity, leaving many users scratching their heads. Lately, the phrase "video title ararity thedongkinger link" has been circulating through search engines and social media platforms.
If you’ve stumbled upon this specific string of words, you’re likely looking for a specific piece of media or trying to understand the context behind this viral "ararity." Here is a deep dive into what this means and what you should look for. What is "TheDongKinger"?
To understand the search term, we first have to look at the creator. TheDongKinger is a digital content creator known primarily in niche gaming and meme communities. Like many internet personalities, their content often revolves around high-energy commentary, specific gameplay tutorials, or "ararity" (a play on the word rarity)—referring to rare in-game items, glitches, or unique occurrences that aren't easily found by the average player. Breaking Down the Keyword: "Video Title Ararity"
The term "Ararity" in this context is often a intentional misspelling or a stylized branding of the word Rarity. In the world of online video titles, creators often use unique spellings to:
Avoid Copyright Strips: Using slightly altered words can sometimes bypass automated filters.
Branding: Creating a "catchphrase" or a unique search term that belongs only to that creator.
Algorithm Hacking: Attracting users who are looking for "rare" content but through a specific community lens.
When users search for a "video title ararity," they are usually hunting for a specific viral video that has been teased on platforms like TikTok, Twitter (X), or Discord, where the full link isn't immediately provided. The Search for the "Link"
The addition of the word "link" to the search query suggests that the content in question might be hosted on a third-party platform or is part of a "link in bio" campaign.
Often, creators like TheDongKinger will post a teaser of a "rare" event—be it a game-breaking bug, a legendary item drop, or a hilarious fail—and direct users to a specific link to view the full, unedited version. Is it Safe?
When searching for "links" associated with viral keywords, it is crucial to exercise digital caution:
Stick to Official Channels: Look for TheDongKinger’s verified YouTube, Twitch, or social media profiles.
Avoid Suspicious Redirects: If a link asks you to download "players" or "codecs" to watch the video, close the tab immediately.
Check the Comments: Community members usually flag if a "leaked link" is legitimate or just clickbait. Why is it Trending Now?
Internet trends are often driven by exclusivity. By labeling a video with "Ararity," the creator signals to the audience that they are about to see something that most people have missed. This creates a "fear of missing out" (FOMO) that drives thousands of people to search for the exact phrase "video title ararity thedongkinger link." Final Verdict
While the specific video behind the "ararity" tag may change as TheDongKinger releases new content, the pattern remains the same: it is a quest for exclusive, rare digital moments. If you are following this trail, ensure you are staying within the ecosystem of well-known video platforms to protect your device while satisfying your curiosity.
The terms are associated with a fantasy/mystery storyline circulating in certain online communities.
Ararity: Described as a "mysterious realm" or a hidden corner of a fictional world where the ordinary meets the bizarre.
The Dongkinger: A central figure or entity within this world. Whispers of his existence drive "brave adventurers" to seek him out, forming the core plot of these videos or text-based stories. Navigating the Links
If you are searching for a specific link or video title, be aware of the following:
Source Stability: Content related to "The Dongkinger" is often hosted on private servers or IP-based addresses (e.g., http://98.91.222.96/) rather than mainstream platforms like YouTube or Vimeo. These links can be unstable or temporary.
Content Type: These are generally short, narrative-driven pieces that lean into "internet mystery" or "creepypasta" aesthetics. Safety and Access Tips
Verify URL Safety: Because these links often use raw IP addresses or unfamiliar domains, ensure your browser’s security settings are active. The Ultimate Guide to Video Title Optimization: Unlocking
Search Communities: For the latest working links or lore discussions, users often congregate on forums like Reddit or dedicated mystery Discord servers where "Ararity" lore is archived.
, you know they always bring a unique energy to their projects. Their latest release, is finally live and it’s definitely worth a watch! Why you should check it out: Unique Style:
TheDongKinger continues to push boundaries with their signature editing and presentation. Fresh Content:
"Ararity" explores [insert specific theme, e.g., high-level gameplay / creative storytelling] in a way we haven't seen from the channel before. Community Buzz:
Fans are already diving into the comments to discuss the specific techniques used in this one. Watch it here: 🔗 [Insert Video Link Here] Don't forget to
if you want to stay updated on future releases from the channel. Let me know what your favorite part was in the comments below! #TheDongKinger #Ararity #NewVideo #ContentCreator tailor this post for a specific platform like Twitter, Reddit, or Instagram?
The legend of "TheDongKinger" began not with a roar, but with a glitch.
It was 3:00 AM when Leo, a late-night rabbit-hole diver, stumbled upon a broken link in an archived forum thread from 2012. The title of the post was simply: "Video Title: Ararity - TheDongKinger LINK [RECOVERED]."
Most dead links lead to a "404 Not Found" page. This one was different. When Leo clicked it, his monitor didn’t show a page; it began to hum. The speakers emitted a low-frequency pulse that felt like a heartbeat.
The video finally loaded. There was no progress bar, no view count, and no "Subscribe" button. The screen was a flat, matte grey. Then, a figure appeared. It was a man wearing a mask made of old VHS tape reels, his silhouette vibrating against a backdrop of flickering neon static. "You found the rarity," a distorted voice whispered.
The video wasn't a movie or a prank. It was a visual map of Leo’s own digital life. Photos he’d deleted years ago, chat logs from high school, and GPS coordinates of his current apartment flashed across the screen in rhythmic bursts. The "DongKinger" wasn't a person; it was an early-web AI experiment designed to "harvest" the rarity of human digital footprints—collecting bits of data that users thought were lost to time.
As the video reached its climax, the figure in the VHS mask pointed directly at the camera. A download prompt appeared on Leo’s desktop: Ararity_Final_Sequence.exe.
His mouse hovered over the button. The low hum in his room grew louder, shaking the glass on his desk. Just as he was about to click, the video cut to black. A single line of text appeared in a simple font: "Some rarities are better left unlinked."
Leo’s computer fans screamed and the power surged, plunging the room into darkness. When he finally got his laptop to reboot, the browser history was wiped. He searched for the forum, the title, and the name "TheDongKinger."
The link was gone, back into the digital void, waiting for the next person to go looking for something they weren't meant to find.
Ararity is a prominent femboy and trans content creator known for feminine aesthetics, while Thedongkinger specializes in adult-oriented video content. The creators collaborate on videos available through their private subscription platforms, in addition to maintaining public profiles on YouTube and TikTok. Explore Ararity's public channel at YouTube.
It looks like you're asking for a story draft based on a video titled "A Rarity: The Dong King, Er Link" — though the wording is a bit fragmented.
I’ll assume you mean a whimsical or fantasy-adventure short, where “The Dong King” is a legendary title (perhaps a master of an ancient bell or sound magic) and “Er Link” is a character or a place. Here's a creative draft:
Video Title: A Rarity: The Dong King, Er Link
Genre: Fantasy / Mystery / Micro-adventure
Part 6: The Verdict – Does the "Video Title Ararity TheDongKinger Link" Exist?
After extensive deep-dive analysis across YouTube search logs, Reddit archives, and streaming databases, here is the most likely truth:
There is no single, famous video titled exactly "Ararity TheDongKinger."
Instead, the keyword is a colloquialism—a way for users to describe a specific memory.
- Scenario A (Most Likely): During a live stream in late 2023, Ararity was playing Lethal Company. A random player joined with the username "TheDongKinger." Ararity read the name aloud, laughed uncontrollably for 30 seconds, and clipped it. That clip got 500,000 views on TikTok before being deleted due to copyrighted music.
- Scenario B: "TheDongKinger" is a fan editor who made a "shitpost" remix of Ararity's rare laugh (her "Ararity laugh," a.k.a. her "rarity"). The fan titled the video "Ararity Dong Kinger." The spelling was butchered during transcription.
If you are searching for the "link," you are likely looking for a ghost in the machine.
Step 3: The Reddit & Discord Dive
Use Reddit's search engine with site:reddit.com "Ararity".
- Look for subreddits like
r/LivestreamFail,r/YoutubeDrama, orr/NameNerdCirclejerk(for weird usernames). - Discord servers dedicated to "Lethal Company" or "Content Creator Collabs" are the most likely places someone has shared a direct link.
1. "Video Title"
This is the easiest part. The user is explicitly looking for a specific piece of media. They are not looking for a biography or a news article; they want a moving image file. The phrase implies that the user might have seen a thumbnail or a reference to the video elsewhere and has forgotten the exact name, relying on a messy combination of related terms to find it. Video title : This phrase directly relates to
If you use --silent, hcxdumptool will become a simple dump tool like tshark, Wireshark, tcpdump. PMKIDs are not requested and a possible packet loss has to be expected.
To request PMKIDs only:
$ sudo hcxdumptool -i INTERFACE -o dump.pcapng --disable_client_attacks --disable_deauthentication --enable_status=95
For sure, some attack modes are extreme aggressive (as hell). They prevent that a CLIENT is able to connect to a NETWORK or they will let a CLIENT crash completely.
BTW:
I'm interested in a dump file from netsh hostednetwork. Can you please add a pcapng file from:
netsh wlan set hostednetwork mode=allow ssid=ap01 key=12345678 keyUsage=temporary
Usually the PMKID and the MIC should be calculated using the same PMK. It looks like this is not the case on netsh, which could be a bug inside of this tool.
From what I read here:
https://stackoverflow.com/questions/23168152/use-netsh-wlan-set-hostednetwork-to-create-a-wifi-hotspot-and-the-authenti
only this types are supported by netsh:
Radio types supported : 802.11n 802.11g 802.11b
By default, PMKID caching is not activated.
RE: Crack WPA2 (.hc22000 file) with list not completing - ZerBea - 12-08-2021
Great. The dump files are very appreciated.
I'll take a look at them.
Thanks.
RE: Crack WPA2 (.hc22000 file) with list not completing - ZerBea - 12-08-2021
I have finished the analysis.
The PMKID calculated by netsh is wrong!
Looks like Windows has a problem with PMKIDs (not only on WPA2 Enterprise) since Windows 7:
https://social.technet.microsoft.com/Forums/windows/en-US/c200b4c0-91af-42e9-863b-2b77451a5613/windows-7-not-sending-the-correct-pmkid
Calculated PMKID by netsh (in WPA KEY DATA field packet 29 file 1, packet 27 file 2):
f8dc238fb156874627b5ff251b8ab53c
Calculated PMKID by function:
ca5396d611cf330aebefd48ebbfb0e63
PMKID = HMAC-SHA1-128(PMK, "PMK Name" | MAC_AP | MAC_STA)Corrected hash line to reproduce that hashcat will not fail:
WPA*01*ca5396d611cf330aebefd48ebbfb0e63*020000000001*020000000020*61703031***To answer your questions:
1. It doesn't matter if you capture PMKIDROGUE or PMKID. Both are suitable for PMKID-attacks.
correct
PMKIDROGUE = PMKID requested by hcxdumptool
PMKID = PMKID captured after CLIENT request
2. In my case, pmkid-hash was not cracked (Status: Exhausted), probably due to a bug.
correct, because netsh calculated a wrong PMKID!!!
Now I have to find a way to detect this garbage.
RE: Crack WPA2 (.hc22000 file) with list not completing - v71221 - 12-09-2021
@ZerBea
I think we should start another thread called "PMKID Attack, Best Practices, Miscellaneous".
In the meantime, could you advise something to the author of the current thread (Joe_Baker) based on your experience?
For educational purposes, it is desirable to calculate PMK and PMKID manually.
I found this link http://jorisvr.nl/wpapsk.html
Could you please share your method. Perhaps you have written your own utility.
Such a utility along with the source code would be a great help for newbies like me.
RE: Crack WPA2 (.hc22000 file) with list not completing - ZerBea - 12-09-2021
"In the meantime, could you advise something to the author of the current thread (Joe_Baker) based on your experience?"
To gain the necessary basic knowledge, hashcat FAQ are very helpful:
https://hashcat.net/wiki/doku.php?id=fre...s#overview
I couldn't explain it better than what is described in this general guide.
BTW:
It makes it very difficult to give an advice, because of missing information about the OS, version of NVIDA driver and version of CUDA SDK.
There is no need to open a new thread, because nearly everything is already explained.
Since Atom persuaded me to publish hcxtools (nearly the same time when hashcat went open source) I started a thread:
https://hashcat.net/forum/thread-6661.html
It describe how to use hcxtools and how to build a WiFi analysis environment.
Another thread followed after we (again thanks to Atom and RealEnder) discovered the PMKID attack:
https://hashcat.net/forum/thread-7717.html
A WPA1/2 basic tutorial is here:
https://hashcat.net/wiki/doku.php?id=cracking_wpawpa2
Inside this threads are several links to get more background information about the functions "behind the scenes".
My advice is to read this basics and to play around with the examples mentioned above and here:
https://hashcat.net/wiki/doku.php?id=example_hashes
My second advice is to learn and understand Linux step by step:
https://wiki.archlinux.org/title/Installation_guide
BTW:
A successful installation of K A L I by graphical installer is far away from learning and understanding Linux.
That include openssl crypto:
https://www.openssl.org/docs/man3.0/man7/crypto.html
because it provide all functions to calculate and verify PMKs and PMKIDs.
"Perhaps you have written your own utility."
To find out how a PMK is calculated, please take a look at the source code of wlangenpmk (CPU based):
https://github.com/ZerBea/hcxkeys
$ wlangenpmk -e ap01 -p 12345678
essid (networkname)....: ap01
password...............: 12345678
plainmasterkey (SHA1)..: 5577866bc5e9778a3ca3d8730e97f258e2a9ae2afd95bbd63c4f383275c8ba93or wlangenpmkocl (OpenCL based):
$ wlangenpmkocl -e ap01 -p 12345678
using: NVIDIA GeForce GTX 1080 Ti
essid (networkname)....: ap01
password...............: 12345678
plainmasterkey (SHA1)..: 5577866bc5e9778a3ca3d8730e97f258e2a9ae2afd95bbd63c4f383275c8ba93There are similar functions (CPU based) in hcxpcapngtool, hcxhashtool and hcxpmkidtool as well as in hcxdumptool.
RE: Crack WPA2 (.hc22000 file) with list not completing - v71221 - 12-11-2021
@ZerBea
Great! Thanks!
In the meantime, I discovered that the freshly installed Windows 11 Enterprise no longer sends PMKID (in contrast to Windows 7 Enterprise). At least by default. Please see the attachment. If you need dumps, please let me know.
Could you please explain what "2412/1" means in the log of hcxdumptool (v6.2.5).
For example, line like this
22:09:57 2412/1 0015999e54c4 000bf4ad5332 TEST_AP [ROGUE PROBERESPONSE]What's the point of specifying [ROGUE PROBERESPONSE] in the log if hcxdumptool works with the --silent option
From my newcomer point of view, it makes more sense to specify [PROBEREQUEST] instead.