hcxtools is a collection of Linux command-line utilities for processing wireless packet captures and authentication data.
It is intended for protocol analysis, password-audit preparation and authorised wireless security assessments. The suite converts captured traffic into formats understood by password-auditing applications, but does not itself perform password cracking.
This is free and open source software.
Key Features
- Processes raw 802.11 packet captures generated by compatible wireless capture tools.
- Converts pcapng and related capture formats into hashes accepted by Hashcat and John the Ripper.
- Uses hcxpcapngtool to extract relevant authentication material from packet captures.
- Uses hcxhashtool to inspect, filter and reorganise HC22000 hash files.
- Filters unwanted or unusable records after conversion rather than discarding potentially useful capture data prematurely.
- Calculates and verifies pre-shared keys and pairwise master keys with hcxpmktool.
- Processes Hashcat pot files and supports both ASCII and UTF-encoded values.
- Generates candidates based on patterns commonly found in weak wireless passwords.
- Extracts and prepares ESSIDs, identities and usernames for subsequent auditing workflows.
- Builds candidate lists from mixed word lists using hcxwltool.
- Can reconstruct capture files from supported hash records with hcxhash2cap.
- Supports several current and legacy Hashcat wireless and authentication hash modes.
- Produces output compatible with applicable John the Ripper formats.
- Reads compressed capture data through gzip support.
- Includes a utility for looking up hardware manufacturers from MAC-address allocation data.
- Can download current vendor and organisationally unique identifier information.
- Provides an optional utility for submitting captures to the wpa-sec analysis service.
- Uses small, composable programs that can be combined in shell scripts and repeatable auditing workflows.
- Builds on Linux using Make or Meson and uses libraries including OpenSSL, zlib and libcurl.
- Is intended for experienced users working with networks they own or are authorised to assess.
Website: github.com/ZerBea/hcxtools
Support:
Developer: ZeroBeat
License: MIT License
hcxtools is written in C. Learn C with our recommended free books and free tutorials.
Related Software
| Wireless Security Tools | |
|---|---|
| bettercap | Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance |
| airgeddon | Multi-use bash script for Linux systems to audit wireless networks |
| Fluxion | Wireless auditing framework for testing Wi-Fi network security |
| URH | Complete suite for wireless protocol investigation |
| aircrack-ng | WiFi security auditing tools suite |
| hcxtools | Tools for analysing Wi-Fi capture and hash files |
| wavemon | ncurses-based monitoring for wireless network devices |
| Kismet | 802.11 layer2 wireless network detector, sniffer, intrusion detection system |
| hcxdumptool | Capture packets from wlan devices |
| Wifite | Python script for auditing wireless networks |
| Fern Wifi Cracker | Wireless security auditing and attack software |
| WHAD | Framework for exploring, analysing and testing wireless protocols |
Read our verdict in the software roundup.
 Explore our carefully curated directory of recommended free and open source software, covering every major software category.The directory forms part of our extensive collection of articles for Linux enthusiasts. It includes hundreds of detailed reviews, together with free and open source alternatives to proprietary software from companies such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. LinuxLinks also covers interesting projects worth exploring, Linux-compatible hardware, free programming books and tutorials, and much more. Know a useful free and open source Linux application that we haven’t covered? Tell us about it using our submission form. |
Please read our Comment Policy before commenting.