How do i decrypt wpa3 packets using wireshark.

asked 2023-09-06 12:21:15 +0000

I'm new to Wireshark and would like to know how to decrypt WPA3 using it. Especially how to retrieve PMK or any other keys required to decrypt it using hostapd. I have access to an android AP (via terminal or any kind of debugging is possible)..

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2023-09-07 23:08:34 +0000

Bob Jones
1481 ●2 ●171 ●22 Boston, MA

Some info here: https://wiki.wireshark.org/HowToDecrypt802.11

Namely the flags for running hostapd, -d and -K which will dump the keys.

edit flag offensive delete link

Comments

At least for wpa_supplicant, the PMK is shown in the debug output as something like this:

WPA: PMK - hexdump(len=32): d1 f8 aa 86 77 92 8f 81 75 92 d0 01 f9 3b b3 59 fe 73 70 20 90 99 09 ea e6 59 6b 1b aa 0c 39 a2

Of course, your key would be different. I would assume since hostapd and wpa_supplicant are developed together, hostapd would have same/similar debug output with keys. No idea if this debug works on an Android device.

Bob Jones ( 2023-09-07 23:15:00 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2023-09-06 12:21:15 +0000

Seen: 819 times

Last updated: Sep 07 '23

How do i decrypt wpa3 packets using wireshark. edit