Files
password-cracker/README.md
2026-03-25 06:25:14 -07:00

116 lines
3.9 KiB
Markdown

# WiFi Cracking Package
## Complete CAP/PCAP Cracking Workflow with Handshake Verification
### Quick Start
```bash
# 1. Make scripts executable
chmod +x auto_crack.sh scripts/*.sh
# 2. Place your CAP/PCAP files in the input/ directory
mkdir -p input
cp /path/to/your/*.cap input/
cp /path/to/your/*.pcap input/
# 3. Run the automation
./auto_crack.sh
```
### What's Included
- **Main Automation Script** (`auto_crack.sh`) - Complete workflow
- **Handshake Verification** (`scripts/verify_handshakes.sh`) - Pre-cracking validation
- **Wordlist Builder** (`scripts/build_wordlist.sh`) - Smart wordlist generation
- **Cracking Pipeline** (`scripts/crack_pipeline.sh`) - Hashcat automation
- **Custom Rules** (`rules/`) - Password mutation rules
- **Documentation** (`docs/`) - Detailed guides and examples
### Directory Structure
```
wifi_cracking_package/
├── auto_crack.sh # MAIN SCRIPT - Run this
├── README.md # This file
├── scripts/ # All automation scripts
│ ├── verify_handshakes.sh # Handshake validation & statistics
│ ├── build_wordlist.sh # Wordlist generation
│ └── crack_pipeline.sh # Hashcat cracking
├── rules/ # Hashcat rule files
│ ├── custom.rule # Custom password mutations
│ └── best64.rule # Common rule set
├── docs/ # Documentation
│ ├── workflow.md # Complete workflow guide
│ └── troubleshooting.md # Common issues & solutions
└── input/ # PLACE YOUR CAP/PCAP FILES HERE
```
### Features
1. **Smart Handshake Verification** - Validates CAP/PCAP files before cracking
2. **Automated Wordlist Management** - Downloads, combines, and optimizes password lists
3. **Rule-Based Attacks** - Uses hashcat rules for password mutations
4. **Batch Processing** - Handles multiple files automatically
5. **Comprehensive Reporting** - Generates detailed results and statistics
6. **Error Recovery** - Handles failures gracefully with logs
### Workflow Steps
1. **System Check** - Verifies tools and dependencies
2. **Handshake Verification** - Validates capture files (NEW!)
3. **Wordlist Generation** - Builds optimized password lists
4. **CAP/PCAP Conversion** - Converts to hashcat format
5. **Hashcat Cracking** - Runs dictionary + rule attacks
6. **Results Reporting** - Generates comprehensive reports
### Handshake Verification
```bash
# Run verification separately
./scripts/verify_handshakes.sh
# Checks for:
# - Valid EAPOL handshakes (4-way handshake)
# - PMKID captures
# - Capture quality and statistics
# - Network identification (SSID/BSSID)
```
### Installation
```bash
# Install required tools
sudo apt update && sudo apt install -y hashcat hcxtools curl wget tshark
# Or use the auto-install feature in auto_crack.sh
```
### Usage Examples
```bash
# Basic usage
./auto_crack.sh
# Manual step-by-step
./scripts/verify_handshakes.sh
./scripts/build_wordlist.sh
./scripts/crack_pipeline.sh
# Custom wordlists
cp ~/wordlists/rockyou.txt input/wordlists/
cp ~/hashcat/rules/*.rule rules/
```
### Output
- **Cracked Passwords**: `results/all_cracked.txt`
- **Verification Reports**: `verification/handshake_report_*.txt`
- **Process Logs**: `auto_crack.log`
- **Hashcat Potfile**: `results/cracking_potfile.txt`
### Requirements
- Linux environment (WSL2, Ubuntu, Kali Linux)
- Hashcat + hcxtools installed
- 4GB+ RAM, 10GB+ disk space
- CAP/PCAP files with valid WPA/WPA2 handshakes
### Legal Notice
**FOR AUTHORIZED SECURITY TESTING ONLY**
Use only on networks you own or have explicit permission to test.
Comply with all applicable laws and regulations.
### Support
1. Check `auto_crack.log` for errors
2. Run `./scripts/verify_handshakes.sh` to validate captures
3. Ensure CAP/PCAP files contain valid handshakes
4. Verify system has required tools installed