{"id":3199,"date":"2019-08-31T09:30:35","date_gmt":"2019-08-31T09:30:35","guid":{"rendered":"http:\/\/www.pir8geek.com\/?p=3199"},"modified":"2019-08-31T09:30:35","modified_gmt":"2019-08-31T09:30:35","slug":"hashcatch-capture-handshakes-of-nearby-wifi-networks-automatically","status":"publish","type":"post","link":"https:\/\/www.jameseduard.com\/?p=3199","title":{"rendered":"Hashcatch &#8211; Capture Handshakes Of Nearby WiFi Networks Automatically"},"content":{"rendered":"<p>[vc_row][vc_column][vc_column_text]Hashcatch deauthenticates clients connected to all nearby WiFi networks and tries to capture the handshakes. It can be used in any linux device including Raspberry Pi and Nethunter devices so that you can capture handshakes while walking your dog<\/p>\n<p>Written by\u00a0<a href=\"https:\/\/twitter.com\/sivaneshashok\" rel=\"nofollow\">@SivaneshAshok<\/a><\/p>\n<h4><a id=\"user-content-poc-of-hashcatch-running-with-a-couple-of-wifi-networks-within-range\" class=\"anchor\" href=\"https:\/\/github.com\/staz0t\/hashcatch#poc-of-hashcatch-running-with-a-couple-of-wifi-networks-within-range\" aria-hidden=\"true\"><\/a>PoC of hashcatch (running with a couple of WiFi networks within range)<\/h4>\n<p><a href=\"https:\/\/asciinema.org\/a\/AQEzLSxo7teoxPzNSJfwn4UNQ\" rel=\"nofollow\"><img decoding=\"async\" src=\"https:\/\/camo.githubusercontent.com\/02596350a47a8677bd01a082058db6e95002b811\/68747470733a2f2f61736369696e656d612e6f72672f612f4151457a4c53786f3774656f78507a4e534a66776e34554e512e737667\" alt=\"hashcatch PoC\" data-canonical-src=\"https:\/\/asciinema.org\/a\/AQEzLSxo7teoxPzNSJfwn4UNQ.svg\" \/><\/a><\/p>\n<h4><a id=\"user-content-install-from-source\" class=\"anchor\" href=\"https:\/\/github.com\/staz0t\/hashcatch#install-from-source\" aria-hidden=\"true\"><\/a>Install from source<\/h4>\n<ol>\n<li><code>git clone https:\/\/github.com\/staz0t\/hashcatch<\/code><\/li>\n<li>Install the prerequisites and ensure that they are working properly<\/li>\n<li>[optional] Add the hashcatch directory to your PATH<\/li>\n<li><code>.\/hashcatch --setup<\/code><\/li>\n<li>Answer the prompts<\/li>\n<li>And done!<\/li>\n<\/ol>\n<h4><a id=\"user-content-install-using-packages\" class=\"anchor\" href=\"https:\/\/github.com\/staz0t\/hashcatch#install-using-packages\" aria-hidden=\"true\"><\/a>Install using packages<\/h4>\n<ol>\n<li>Download the respective package for your distribution from\u00a0<a href=\"https:\/\/github.com\/aircrack-ng\/aircrack-ng\/releases\">releases<\/a><\/li>\n<li>Run\u00a0<code>sudo pacman -U .\/hashcatch-&lt;ver&gt;-1-any.pkg.tar.xz<\/code>\u00a0or\u00a0<code>sudo apt install .\/hashcatch_&lt;ver&gt;_all.deb<\/code><\/li>\n<li><code>sudo hashcatch --setup<\/code><\/li>\n<li>Answer the prompts<\/li>\n<li>And done!<\/li>\n<\/ol>\n<h4><a id=\"user-content-prerequisites\" class=\"anchor\" href=\"https:\/\/github.com\/staz0t\/hashcatch#prerequisites\" aria-hidden=\"true\"><\/a>Prerequisites<\/h4>\n<ul>\n<li>aircrack-ng<\/li>\n<li>hashcat-utils<\/li>\n<li>hcxtools<\/li>\n<li>jq<\/li>\n<\/ul>\n<h4><a id=\"user-content-usage\" class=\"anchor\" href=\"https:\/\/github.com\/staz0t\/hashcatch#usage\" aria-hidden=\"true\"><\/a>Usage<\/h4>\n<p><code>sudo hashcatch<\/code>\u00a0to start hashcatch<\/p>\n<p><code>hashcatch --help<\/code>\u00a0to print the help screen<\/p>\n<ul>\n<li>Hashcatch runs indefinitely until keyboard interrupt<\/li>\n<li>Handshakes captured will be stored in\u00a0<em>\/usr\/share\/hashcatch\/handshakes\/<\/em><\/li>\n<li>The captured WiFi network&#8217;s BSSID and ESSID will be added to\u00a0<em>\/usr\/share\/hashcatch\/db<\/em><\/li>\n<li>If you&#8217;re targeting a wifi network, spend around 20 to 30 seconds within the wifi&#8217;s range to ensure handshake capture<\/li>\n<li>[Experimental] If you are connected to the internet while capturing, the following data will also be added to the db file\n<ul>\n<li>latitude<\/li>\n<li>longitude<\/li>\n<li>signal radius<\/li>\n<li>time of record<\/li>\n<li>Note: Kudos to\u00a0<a href=\"https:\/\/www.mylnikov.org\/\" rel=\"nofollow\">Alexander Mylnikov<\/a>\u00a0for the API he&#8217;s running that returns the location details of a router&#8217;s MAC address using public databases<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h4><a id=\"user-content-the-configuration-file\" class=\"anchor\" href=\"https:\/\/github.com\/staz0t\/hashcatch#the-configuration-file\" aria-hidden=\"true\"><\/a>The Configuration file<\/h4>\n<ul>\n<li>The configuration file can be found in \/etc\/hashcatch\/hashcatch.conf<\/li>\n<li>You can later edit the &#8220;interface&#8221; field to set the interface of your choice<\/li>\n<li>You can also add an &#8220;ignore&#8221; field to mention the WiFi networks you want hashcatch to ignore while running<\/li>\n<li>Refer the example given below to know about the format in which entries should be added to the configuration file<\/li>\n<li>Format\u00a0<code>option name=option1,option2,option3<\/code><\/li>\n<li>No space in between option name, equal sign and options<\/li>\n<li>Example<\/li>\n<\/ul>\n<pre><code>interface=wlan0\nignore=Google Starbucks,AndroidAP\n<\/code><\/pre>\n<h4><a id=\"user-content-features-to-be-added\" class=\"anchor\" href=\"https:\/\/github.com\/staz0t\/hashcatch#features-to-be-added\" aria-hidden=\"true\"><\/a>Features to be added<\/h4>\n<ul>\n<li>More location features<\/li>\n<li>Automatic upload to websites to start cracking the handshake<\/li>\n<\/ul>\n<ul>\n<li>PMKID attack<\/li>\n<li>Pixiedust attack for WPS enabled networks<\/li>\n<li>More location features<\/li>\n<li>Automatically check handshakes with a rainbow table<strong>\n<p><a href=\"https:\/\/github.com\/staz0t\/hashcatch\">Download at Github<\/a><\/strong><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>[vc_row][vc_column][vc_column_text]Hashcatch deauthenticates clients connected to all nearby WiFi networks and tries to capture the handshakes. It can be used in any linux device including Raspberry Pi and Nethunter devices so that you can capture handshakes while walking your dog Written by\u00a0@SivaneshAshok PoC of hashcatch (running with a couple of WiFi networks within range) Install from<\/p>\n","protected":false},"author":1,"featured_media":4650,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[443,162,23,10,318,154,615,464,515],"tags":[775,776,777,778,22,779,780,457,781,782],"class_list":["post-3199","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hacking","category-information-gathering","category-linux","category-networking","category-password-attacks","category-pentesting-tools","category-vulnerability-scanner","category-wireless-attacks","category-wireless-network","tag-airdump","tag-airplayng","tag-handshake","tag-hashcatch","tag-linux","tag-nethunter","tag-pixie","tag-wifi","tag-wifihacking","tag-wps"],"_links":{"self":[{"href":"https:\/\/www.jameseduard.com\/index.php?rest_route=\/wp\/v2\/posts\/3199","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jameseduard.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jameseduard.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jameseduard.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jameseduard.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3199"}],"version-history":[{"count":0,"href":"https:\/\/www.jameseduard.com\/index.php?rest_route=\/wp\/v2\/posts\/3199\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.jameseduard.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3199"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jameseduard.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3199"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jameseduard.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3199"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}