hcxtools is a collection of Linux command-line utilities for processing wireless packet captures and authentication data.
It is intended for protocol analysis, password-audit preparation and authorised wireless security assessments. The suite converts captured traffic into formats understood by password-auditing applications, but does not itself perform password cracking.
This is free and open source software.
Key Features
- Processes raw 802.11 packet captures generated by compatible wireless capture tools.
- Converts pcapng and related capture formats into hashes accepted by Hashcat and John the Ripper.
- Uses hcxpcapngtool to extract relevant authentication material from packet captures.
- Uses hcxhashtool to inspect, filter and reorganise HC22000 hash files.
- Filters unwanted or unusable records after conversion rather than discarding potentially useful capture data prematurely.
- Calculates and verifies pre-shared keys and pairwise master keys with hcxpmktool.
- Processes Hashcat pot files and supports both ASCII and UTF-encoded values.
- Generates candidates based on patterns commonly found in weak wireless passwords.
- Extracts and prepares ESSIDs, identities and usernames for subsequent auditing workflows.
- Builds candidate lists from mixed word lists using hcxwltool.
- Can reconstruct capture files from supported hash records with hcxhash2cap.
- Supports several current and legacy Hashcat wireless and authentication hash modes.
- Produces output compatible with applicable John the Ripper formats.
- Reads compressed capture data through gzip support.
- Includes a utility for looking up hardware manufacturers from MAC-address allocation data.
- Can download current vendor and organisationally unique identifier information.
- Provides an optional utility for submitting captures to the wpa-sec analysis service.
- Uses small, composable programs that can be combined in shell scripts and repeatable auditing workflows.
- Builds on Linux using Make or Meson and uses libraries including OpenSSL, zlib and libcurl.
- Is intended for experienced users working with networks they own or are authorised to assess.
Website: github.com/ZerBea/hcxtools
Support:
Developer: ZeroBeat
License: MIT License
hcxtools is written in C. Learn C with our recommended free books and free tutorials.
Related Software
| Wireless Security Tools | |
|---|---|
| bettercap | Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance |
| airgeddon | Multi-use bash script for Linux systems to audit wireless networks |
| URH | Complete suite for wireless protocol investigation |
| aircrack-ng | WiFi security auditing tools suite |
| wavemon | ncurses-based monitoring for wireless network devices |
| Kismet | 802.11 layer2 wireless network detector, sniffer, intrusion detection system |
| hcxdumptool | Capture packets from wlan devices |
| Wifite | Python script for auditing wireless networks |
| HORST | Highly Optimized Radio Scanning Tool |
| Fern Wifi Cracker | Wireless security auditing and attack software |
| LinSSID | Graphical wireless scanning |
Read our verdict in the software roundup.
Explore our comprehensive directory of recommended free and open source software. Our carefully curated collection spans every major software category.This directory is part of our ongoing series of informative articles for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more. Discovered a useful open source Linux program that we haven’t covered yet? Let us know by completing this form. |


Please read our Comment Policy before commenting.