qualcomm_android_monitor_mode VS naive-hashcat

Aircrack-ng

Use aircrack-ng to capture the WiFi 4-way handshake. Specifically;

https://www.aircrack-ng.org/ try this

I mainly used Wireshark and aircrack-ng

Under the right circumstances. https://www.aircrack-ng.org/

Have you looked at aircrack-ng?

I've had mixed results on laptops. I've never bothered to make the fingerprint reader work, that just isn't my thing. I've had decent luck with all the standard functions video, audio, storage, keyboard, mousepad, wifi on most models of Lenovo and Dell in the last decade. I've had mixed results on Asus laptops, especially the recent ones. The biggest challenge I've had is finding out ahead of time what wifi chipset is used and this has only affected me when using tools like aircrack-ng [1]. The way I quickly test how a laptop will behave is to boot Kali Linux [2] into ram. Sometimes a sales person at a computer store would let me do this on a demo model.

[1] - https://www.aircrack-ng.org/

[2] - https://www.kali.org/

For this, I downloaded wordlists such as the rockyou wordlist and used tools such as Hashcat and John the ripper.

For decrypting the .cap file, we've different techniques. We'll use simple technique using aircrack-ng only. It'll help us crack the password using a wordlist. You can use rockyou.txt wordlist which is most commonly used & is updated on regular basis.

First, any sort of password that uses an actual word (English or otherwise) has a far greater chance of being cracked. This is due to the fact that common password lists (e.g. the rockyou list) contain millions of unique entries from sites around the web. Many people share a favorite animal or plant as well, so unless your favorite animal is something unique like Mustela erminea there's a good chance that it's an entry in a list somewhere.

Most of the time a DB of hashed passwords is leaked/stolen and the attacker has unlimited attempts to brute force that. What's also commonly done is that they run it against dictionaries (and there are some pretty good dictionaries for that and some of them are easily accessible online) and if the DB is large enough, they're practically guaranteed to get hits immediately.

Looking at the GitHub page for naive hashcat, it appears as though it only takes at most three arguments. Is there a reason you're using it over regular hashcat?

First, it is important to know how the process works. Hashing is a process essentially different from encryption - you can only do it once. It means that we cannot really recover the plaintext of a hashed password; instead, we can only compare its hash with our guesses. So, it's like hashing several words and seeing which of them matches exaclty our hash. Then, it must be the password. We can automatize this process with two tools: hashcat and a dictionary of potential passwords. This kind of dictionary is easy to find on internet, so we are going to use rock you.

I use only SecLists (https://github.com/brannondorsey/naive-hashcat/releases/download/data/rockyou.txt)

rainbow table ("dictionary") plaintext or broken list of common passwords (i.e. Rockyou) leaked from many sources ^ those give you an idea of what people think are "clever" passwords

It's important to choose strong passwords. That's because there are lists of millions passwords like rockyou.txt which can be used to brute force your Linux system using hydra.