WPA PMKID / Handshake → Hashcat Formatter
v1.0 // Hylas Security
PMKID Entry Builder
32 hex chars — from hcxdumptool or hcxtools
12 hex chars, no separators
12 hex chars, no separators
Hex-encoded SSID — or type SSID name below
// Hashcat WPA Mode Reference [ EXPAND ]
ModeNameDescription
-m 22000WPA-PBKDF2-PMKID+EAPOLUnified mode — handles both PMKID and EAPOL handshake. Recommended for hc22000 files.
-m 22001WPA-PMK-PMKID+EAPOLFor use when PMK (not PSK) is known — advanced scenarios.
-m 2500WPA/WPA2 (legacy)Legacy mode for older .hccapx files. Use hcxtools to convert to hc22000.
-m 2501WPA/WPA2-PMK (legacy)Legacy PMK mode. Superseded by 22001.
Useful Commands
# Convert pcap to hc22000 using hcxtools:
hcxpcapngtool -o out.hc22000 capture.pcapng

# Extract PMKID with hcxdumptool:
hcxdumptool -i wlan0 -o dump.pcapng --enable_status=1

# Show PMKID stats:
hcxpcapngtool -o hashes.hc22000 --pmkid-file=pmkids.txt dump.pcapng

# Attack:
hashcat -m 22000 hashes.hc22000 /usr/share/wordlists/rockyou.txt -r rules/best64.rule