<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Cracking WPA Handshakes — API & Tool Reference

> Quick reference for tools, commands, and APIs used in cracking-wpa-handshakes.

## Tools


### `aircrack-ng`

WPA/WPA2 key cracking tool

**Usage:**
```bash
aircrack-ng -w <wordlist> <capture.cap>
```

**Key Flags:**
  - `-w: wordlist path`
  - `-b: target BSSID`
  - `-e: target ESSID`
  - `-l: write key to file`

---

### `hashcat`

Advanced GPU-accelerated password recovery

**Usage:**
```bash
hashcat -m 22000 <hashfile> <wordlist>
```

**Key Flags:**
  - `-m 22000: WPA-PBKDF2-PMKID+EAPOL`
  - `-a 0: dictionary`
  - `-a 3: brute-force/mask`
  - `-r: rules file`
  - `-w: workload profile`

---

### `hcxpcapngtool`

Convert pcap/pcapng to hashcat format

**Usage:**
```bash
hcxpcapngtool -o <output.hc22000> <input.pcapng>
```

**Key Flags:**
  - `-o: output hash file`
  - `-E: output ESSID list`
  - `-I: output identity list`

---

### `hcxdumptool`

PMKID and EAPOL capture tool

**Usage:**
```bash
hcxdumptool -i <interface> -o <output>
```

**Key Flags:**
  - `--enable_status: status level`
  - `--filterlist_ap: BSSID filter`
  - `--filtermode: filter mode`

---


## Integration Notes

- All tools should be run with least-privilege access appropriate to the task
- Log all tool invocations for audit trail
- Validate tool output before acting on results
- Cross-reference findings with multiple tools where possible

## See Also

- Parent skill: [Wireless Security](../../../SKILL.md)
- Technique SKILL.md: [../SKILL.md](../SKILL.md)
