airdecloak-ng 命令

常用示例

说明

airdecloak-ng filters out WEP cloaking techniques from wireless capture files. Some access points implement cloaking by injecting fake or corrupted packets to confuse WEP cracking tools. This tool identifies and removes these cloaking packets, producing a cleaner capture file that can be more effectively analyzed or cracked.

参数

-i _file_

Input capture file (pcap format).

-o _file_

Output file for valid (cleaned) packets. Default: _<src>_-filtered.pcap.

-c _file_

Output file for cloaked packets. Default: _<src>_-cloaked.pcap.

-u _file_

Output file for unknown/ignored packets. Default: invalid_status.pcap.

--bssid _mac_

Filter by access point MAC address.

--ssid _essid_

Filter by network ESSID.

--filters _list_

Apply filtering methods in order (signal, duplicate_sn, duplicate_sn_ap, duplicate_sn_client, consecutive_sn, duplicate_iv, signal_dup_consec_sn).

--null-packets

Treat null packets as potentially cloaked.

--disable-base-filter

Skip base filtering logic.

--drop-frag

Remove fragmented packets.