--- name: "hcxhashtool" section: "1" platform: "linux" package: "hcxtools" version: "6.3.5-1" release: "Debian 13 (Trixie)" platforms: ["linux"] url: "https://new.carta.tech/hcxhashtool" --- # hcxhashtool(1) hcx tools set ## NAME hcxhashtool - hcx tools set ## DESCRIPTION hcxhashtool 6.3.5 (C) 2024 ZeroBeat usage: hcxhashtool \ options: **-i** \ : input PMKID/EAPOL hash file **-o** \ : output PMKID/EAPOL hash file **-E** \ : output ESSID list (autohex enabled) **-E** stdout : output ESSID list to stdout (autohex enabled) **-L** \ : output ESSID list (unfiltered and unsorted) - useful in combination with hashcat **-a9** option **-d** : download https://standards-oui.ieee.org/oui.txt - and save to ~/.hcxtools/oui.txt internet connection required **-h** : show this help **-v** : show version **--essid-group** : convert to ESSID groups in working directory - full advantage of reuse of PBKDF2 not on old hash formats **--oui-group** : convert to OUI groups in working directory - not on old hash formats **--mac-group-ap** : convert APs to MAC groups in working directory - not on old hash formats **--mac-group-client** : convert CLIENTs to MAC groups in working directory - not on old hash formats **--type=**\ : filter by hash type - bitmask: 1 = PMKID 2 = EAPOL - default PMKID and EAPOL (1+2=3) **--hcx-min=**\ : disregard hashes with occurrence lower than hcx-min/ESSID **--hcx-max=**\ : disregard hashes with occurrence higher than hcx-max/ESSID **--essid-len** : filter by ESSID length - default ESSID length: 0...32 **--essid-min** : filter by ESSID minimum length - default ESSID minimum length: 0 **--essid-max** : filter by ESSID maximum length - default ESSID maximum length: 32 **--essid=**\ : filter by ESSID **--essid-part=**\ : filter by part of ESSID (case sensitive) **--essid-partx=**\: filter by part of ESSID (case insensitive) - locale and wide characters are ignored **--essid-list=**\ : filter by ESSID file **--essid-regex=**\ : filter ESSID by regular expression **--mac-ap=**\ : filter AP by MAC - format: 001122334455, 00:11:22:33:44:55, 00-11-22-33-44-55 (hex) **--mac-client=**\ : filter CLIENT by MAC - format: 001122334455, 00:11:22:33:44:55, 00-11-22-33-44-55 (hex) **--mac-list=**\ : filter by MAC file - format: 001122334455, 00:11:22:33:44:55, 00-11-22-33-44-55 (hex) **--mac-skiplist=**\ : exclude MAC from file - format: 001122334455, 00:11:22:33:44:55, 00-11-22-33-44-55 (hex) **--oui-ap=**\ : filter AP by OUI - format: 001122, 00:11:22, 00-11-22 (hex) **--oui-client=**\ : filter CLIENT by OUI - format: 001122, 00:11:22, 00-11-22 (hex) **--vendor=**\ : filter AP or CLIENT by (part of) VENDOR name **--vendor-ap=**\ : filter AP by (part of) VENDOR name **--vendor-client=**\ : filter CLIENT by (part of) VENDOR name **--authorized** : filter EAPOL pairs by status authorized (M2M3, M3M4, M1M4) **--challenge** : filter EAPOL pairs by status CHALLENGE (M1M2, M1M2ROGUE) **--rc** : filter EAPOL pairs by replaycount status checked **--rc-not** : filter EAPOL pairs by replaycount status not checked **--apless** : filter EAPOL pairs by status M1M2ROGUE (M2 requested from CLIENT) **--info=**\ : output detailed information about content of hash file - no filter options available **--info**=*stdout* : stdout output detailed information about content of hash file - no filter options available **--info-vendor=**\ : output detailed information about ACCESS POINT and CLIENT VENDORs - no filter options available **--info-vendor-ap=**\ : output detailed information about ACCESS POINT VENDORs - no filter options available **--info-vendor-client=**\ : output detailed information about CLIENT VENDORs - no filter options available **--info-vendor**=*stdout* : stdout output detailed information about ACCESS POINT and CLIENT VENDORs - no filter options available **--info-vendor-ap**=*stdout* : stdout output detailed information about ACCESS POINT VENDORs - no filter options available **--info-vendor-client**=*stdout* : stdout output detailed information about CLIENT VENDORs - no filter options available **--psk=**\ : pre-shared key to test - due to PBKDF2 calculation this is a very slow process no nonce error corrections **--pmk=**\ : plain master key to test - no nonce error corrections **--hccapx-in=**\ : input deprecated hccapx file - MESSSAGEPAIR is taken from the hccapx source **--hccapx-out=**\ : output to deprecated hccapx file **--hccap-in=**\ : input ancient hccap file **--hccap-out=**\ : output to ancient hccap file - MESSSAGEPAIR is calculated from the EAPOL MESSAGE due to missing information, the worst case value is calculated **--hccap-single** : output to ancient hccap single files (MAC + count) **--john=**\ : output to deprecated john file **--vendorlist** : stdout output complete OUI list sorted by OUI **--help** : show this help **--version** : show version Important notice: hcxhashtool does not do NONCE ERROR CORRECTIONS in case of a packet loss, you get a wrong PTK