Linux command
airdecap-ng 命令
文本
复制后可按需替换文件名、目录或参数。
常用示例
Decrypt WEP
airdecap-ng -w [hex_key] [capture.cap]
Decrypt WPA/WPA2
airdecap-ng -p [passphrase] -e [SSID] [capture.cap]
Keep 802.11 headers
airdecap-ng -l -w [hex_key] [capture.cap]
Example
airdecap-ng -p [passphrase] -e [SSID] -b [00:11:22:33:44:55] [capture.cap]
Example
airdecap-ng -k [pmk_hex] -e [SSID] [capture.cap]
说明
airdecap-ng decrypts WEP and WPA/WPA2 encrypted capture files when you know the key. It produces an unencrypted capture file (by default suffixed with -dec.cap) that can be analyzed with tools like Wireshark. By default, 802.11 wireless headers are stripped so the output resembles a standard Ethernet capture. Use -l to preserve the original 802.11 frames.
参数
- -w _key_
- WEP key in hexadecimal
- -p _passphrase_
- WPA/WPA2 passphrase
- -e _essid_
- Network name (required for WPA)
- -b _bssid_
- Access point MAC address filter
- -l
- Don't remove the 802.11 header from decrypted output (keep wireless frames).
- -k _pmk_
- Use the specified WPA/WPA2 Pairwise Master Key (in hex) instead of passphrase.
FAQ
What is the airdecap-ng command used for?
airdecap-ng decrypts WEP and WPA/WPA2 encrypted capture files when you know the key. It produces an unencrypted capture file (by default suffixed with -dec.cap) that can be analyzed with tools like Wireshark. By default, 802.11 wireless headers are stripped so the output resembles a standard Ethernet capture. Use -l to preserve the original 802.11 frames.
How do I run a basic airdecap-ng example?
Run `airdecap-ng -w [hex_key] [capture.cap]` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
What does -w _key_ do in airdecap-ng?
WEP key in hexadecimal