This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Windows AP - Capture Wireless Handshake

0

Hi guys,

I'm still trying to figure this out and perhaps you can help me out with this one. I tried searching for a couple of days but I gave up now.

What I would like to achieve is to grab the Wireless SSID Key that a client tries to connect with to my access point. As I don't actually have an AP for this exercise, I'm using Windows 8.1 to create a hostednetwork:

netsh wlan set hostednetwork mode=allow ssid=”TestMe” key=”Password.01”

Then I start it with:

netsh wlan start hostednetwork

Now it is available, I can see it from other wireless devices. When I do not select in the NIC option to share the connection with another NIC, Windows will automatically create a new NIC where the traffic is forwarded from/to the wireless network. When I start WireShark and then I try to connect with a wrong (or even with the good one) passphrase, I don't see the actual handshake. I see the DHCP Request from the device nothing earlier?

Thanks :)

asked 26 Oct '15, 03:53

simnether's gravatar image

simnether
6112
accept rate: 0%


One Answer:

0

See https://wiki.wireshark.org/CaptureSetup/WLAN. I think you will likely need an AirPcap adapter to see the frames you're interested in.

answered 27 Oct '15, 10:54

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142
accept rate: 20%