All notable changes to this project (multicapconverter) will be documented in this file.
- Renamed cloaked-essid argument to overwrite-essid
- Default export option set to hcwpax
- MAC GEOLOCATION LOOKUP (--locate)
- Feature to let user indicate ESSID when missing from pcap file (cloaked ESSID)
- Fixed BIG_ENDIAN_HOST pcapng block_length
- Fixed reading corrupted files
- Fixed HCXDUMPTOOL Custom Block identification
- OUI_DB_FILE set to an absolute path
- Some issues while dealing with BE files
- Changed pmkid separator from "*" to ":" (--export hcpmkid)
- MAC VENDOR LOOKUP
- MAC GEOLOCATION LOOKUP (--locate)
- LE/BE/NC detection issues
- EAPOL messages with zeroed nonce weren't being counted
- EAPOL messages with duplicated data were being skipped
- Packets with mismatched replay counter will be ignored
- Time Gap calculations for better analysis
- Incorrect timestamps extraction for pcapng
- Incorrect timestamps resolutions check for pcapng
- Extract wordlist / AP-LESS possible passwords option (--wordlist wordlist)
- Better info about each network
- Incorrect auth packet size calculation
- PMKIDs that are not PSK/PSK256 related won't be exported unless the user specify the --ignore-ie option
- PMKIDs found in EAPOL-M1 won't be exported unless the keyver is 1, 2 or 3 (or if the user specify the --ignore-ie option)
- Support for WPA3
- Export as hceapmd5 (--export hceapmd5) (hashcat mode = 4800)
- Export as hceapleap (--export hceapleap) (hashcat mode = 5500)
- Export as hccap (--export hccap) (hashcat mode = 2500 (legacy))
- Errors were not being reported
- --ignore-ts option (Ignore timestamps check)
- PMKIDs found in EAPOL-M1 won't be exported unless the user specify the --ignore-ie option
- --ignore-ie option (Ignore information element (AKM Check))
- PMKIDs were not being exported if the station that holds those pmkids have no other M1,M2,M3,M4 frames captured
- --do-not-clean option
- Some PMKIDs in (RE)ASSOC_REQ where not being extracted properly
- Extract PMKIDs from EAPOL-M2
- Windows multiprocessing compatibility issue(s)
- New export format hcpmkid (hashcat mode: 16800)
- Initial Release
Date format: DD/MM/YYYY