> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/hacking-wifi/wpa-wpa2-psk-network-attacks/password-auditing/extracting-the-handshake-hash-with-aircrack.md).

# 使用 Aircrack-ng 提取握手哈希

导出授权的 WPA/WPA2 握手捕获，用于离线密码审计工具。

### 概述

仅将此工作流程用于您拥有或已获授权评估的网络。

Aircrack-ng 会将捕获到的 WPA/WPA2 握手导出为一个 `.hccap` 文件。此文件包含用于离线密码审计工具的握手数据。它不会泄露网络口令。

在导出之前，请确认捕获内容包含有效的握手。

### 导出握手捕获

转换 `CAPTURE-01.cap` 为一个 `.hccap` 文件：

{% code overflow="wrap" %}

```bash
aircrack-ng -J myCapture CAPTURE-01.cap
```

{% endcode %}

<figure><img src="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2FS6NFFyUStJPs9Xoc737y%2F%7B07C7C5AB-FD31-4E4F-AB28-D5B9E4C8CF32%7D.png?alt=media&amp;token=45e1bebc-fa38-4881-8a75-b3c55bb11917" alt=""><figcaption></figcaption></figure>

该命令会创建 `myCapture.hccap`.

### 创建哈希条目

使用 `hccap2john` 以将导出的文件转换为哈希条目：

{% code overflow="wrap" %}

```bash
hccap2john myCapture.hccap > hash
```

{% endcode %}

该 `哈希` 文件包含提取出的握手哈希。仅可将其用于经批准的密码审计工具。

### 验证输出

在使用前检查输出：

* 确认输出包含哈希条目。
* 将捕获文件和哈希文件保留在评估范围内。
* 将该哈希视为敏感认证材料。

<figure><img src="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fo96yzfJlSxjvFfyjiPik%2F%7B1F46BB2A-B9D1-43B2-8D59-CAE04AE8A306%7D.png?alt=media&amp;token=83200e75-3f01-4855-ab2f-0930f9896f03" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://hacking-notes.jord4n.pro/zh/hacking-wifi/wpa-wpa2-psk-network-attacks/password-auditing/extracting-the-handshake-hash-with-aircrack.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
