hcxdumptool

Capture PMKID/handshakes for hashcat.

KaliParrothigh

pkg: hcxdumptool

hcxdumptool captures WPA PMKIDs and handshakes (clientless attacks possible) for offline cracking with hashcat.

Syntax

hcxdumptool -i {iface} -o {out.pcapng}

Example

hcxdumptool -i wlan0mon -o capture.pcapng

Captures PMKIDs/handshakes into a pcapng for conversion to hashcat format.

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

-i <wlan0mon>Monitor-mode interface.
-o <cap.pcapng>Output pcapng file.
--enable_status=1Show live capture status.
-c <1,6,11>Channel(s) to scan.

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

hcxdumptool

Usage examples

hcxdumptool -i wlan0mon -o cap.pcapng

Capture PMKIDs/handshakes.

Advantages
  • Clientless PMKID capture
  • Direct hashcat workflow
Disadvantages
  • Specific adapter support
  • Disruptive options
Tags
#wifi#pmkid#capture

Official docs: hcxdumptool

Related commands

Frequently asked questions

What is hcxdumptool used for?
hcxdumptool captures WPA PMKIDs and handshakes (clientless attacks possible) for offline cracking with hashcat.
What is an example hcxdumptool command?
A common example is: hcxdumptool -i wlan0mon -o capture.pcapng — Captures PMKIDs/handshakes into a pcapng for conversion to hashcat format.
Is hcxdumptool part of Kali Linux?
Yes. hcxdumptool ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install hcxdumptool.
What category of security tool is hcxdumptool?
hcxdumptool is a Wireless Attacks tool with a high-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →