--crack option should run cracking programs, show status, and save cracked keys about wifite2

[derv82]

Note: there's still the problem of creating a .hccapx file needed by hashcat.

Maybe Wifite could:

1. Look for cap2hccapx.bin in the user's directory? (Yeck)
2. Automatically upload the .cap file, "convert", and download the hccapx file using hashcat's website: https://hashcat.net/cap2hccapx/ (Doesn't work if user is offline).
3. git pull <hashcat-utils> && cd src && make && ./cap2hccapx ... (Worst. Idea. Ever.)

[derv82]

Parsing output of aicrack-ng was easy using Wifite's Process module. See AttackWPA#crack_handshake

I assume parsing the output of other programs is equally feasible.

[wifiuk]

When you decide what you are doing to do in regards to the above, let me know and i can test it for you, if you want.

[derv82]

Alright this isn't as easy as I thought.

1. pyrit doesn't output it's status very frequently (if at all?). It's like once every few minutes. Not very useful, and not really worth-it for parsing.
2. I can't get hashcat to work on my VM to save my life. I tried the steps in this stackexchange answer but still nothing.
3. john... does anyone actually use john to crack WPA handshakes? I feel like hashcat is 100% the way to go for GPU-based cracking, otherwise aircrack-ng would be fine for CPU-based cracking.

I am inclined to keep the --crack behavior as-is for now (showing commands to execute). I'll look into auto-generating the .hccapx file by making a web request to hashcat.net, but that's about as far as I'd go...

[derv82]

I'll look into auto-generating the .hccapx file by making a web request to hashcat.net, but that's about as far as I'd go...

Kali has the binary to generate a hccapx file: /usr/lib/hashcat-utils/cap2hccapx.bin

Updated --crack output to include this command if it's found on the system; otherwise suggests going to the website to generate the hccapx file.

wifite2/py/CrackHandshake.py

Lines 70 to 78 in 9661da5

	hccapx_file = "/tmp/generated.hccapx"
	cap2hccapx = "/usr/lib/hashcat-utils/cap2hccapx.bin"
	if os.path.exists(cap2hccapx):
	Color.pl(" {G}%s {W}%s {C}%s{W}" % (cap2hccapx, cap_file, hccapx_file))
	else:
	Color.pl(" {O}# Install hashcat-utils: {C}https://hashcat.net/wiki/doku.php?id=hashcat_utils")
	Color.pl(" {C}cap2hccapx.bin {W}%s {C}%s{W}" % (cap_file, hccapx_file))
	Color.pl(" {O}# OR visit https://hashcat.net/cap2hccapx to generate a .hccapx file{W}")
	Color.pl(" {O}# Then click BROWSE -> %s -> CONVERT and save to %s" % (cap_file, hccapx_file))

[derv82]

I'm pretty happy with how --crack works now; showing different commands to crack a handshake, and allowing the user to select one & copy/paste into a terminal.

I don't see a lot of benefit in running these commands within Wifite, parsing the (unstable) output of the programs, etc. And this will break when programs change their output!