hcxdumptool: PMKID not found on TP-Link / D-Link router

Hi to all. I have a problem with this software. When I try to find PKMID it give me only a Proberequest and a Handshake AP-LESS within 3-4 hours from a TP-LINK/ D-LINK target! Signal strong was -67.

I use this Wifi Card: AWUS036H (RTL8187 Drivers) and +10dB gain antenna

I use this command: hcxdumptool -o test.pcapng -i wlan0 --filterlist=mac.txt --filtermode=3 -c 6 - --enable_status=3

anyway without the filter list the software found PKMID of nearest and farest AP except my target! Why?

Thank you for answers.

About this issue

  • Original URL
  • State: closed
  • Created 5 years ago
  • Comments: 36 (20 by maintainers)

Most upvoted comments

AP-LESS HANDSHAKE means that hcxdumptool is acting as an access point and requested a M2 EAPOL frame from a client, from which you can recover the password. Some access points doesn’t transmit PMKIDs, because this feature is disabled or not present: https://hashcat.net/forum/thread-7717.html Your access point is not vulnerable against the PMKID attack.

BTW: There is no need to wait 3-4 hours. If the access point use a PMKID, you will retrieve it in less than an minute.

Closed this, because it isn’t an issue.