Hashcat Utilities
Hashcat provides more than two dozen small utilities
that are useful for password cracking.
They are not installed by default but are available
through the hashcat-utils package.
After installation, these utilities are found in this directory.
We’ll notice one utility that is specifically relevant for our purposes.
It exports WPA handshakes from PCAP files to HCCAPx,
a format used by hashcat for WPA/WPA2 handshakes.
In the following example, we convert our first capture file to output.hccapx.
The utility takes parameters in the following order:
The input capture filename,
The output hccapx filename,
And optionally,
one or more network names in an ESSID BSSID format.
Even though it’s better,
not all four EAPoL frames of a handshake are necessary.
In this case, the whole handshake has been captured and because different
EAPoL frames in the handshake contain the same information,
hashcat is able to produce "4 WPA Handshakes” out of it.
Note that aircrack-ng can also use .hccapx files as input for cracking.
We can find documentation for the other utilities
on the dedicated documentation page in the hashcat wiki.