Ask Your Question

How do i decrypt wpa3 packets using wireshark.

asked 2023-09-06 12:21:15 +0000

I'm new to Wireshark and would like to know how to decrypt WPA3 using it. Especially how to retrieve PMK or any other keys required to decrypt it using hostapd. I have access to an android AP (via terminal or any kind of debugging is possible)..

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2023-09-07 23:08:34 +0000

Bob Jones gravatar image

Some info here:

Namely the flags for running hostapd, -d and -K which will dump the keys.

edit flag offensive delete link more


At least for wpa_supplicant, the PMK is shown in the debug output as something like this:

WPA: PMK - hexdump(len=32): d1 f8 aa 86 77 92 8f 81 75 92 d0 01 f9 3b b3 59 fe 73 70 20 90 99 09 ea e6 59 6b 1b aa 0c 39 a2

Of course, your key would be different. I would assume since hostapd and wpa_supplicant are developed together, hostapd would have same/similar debug output with keys. No idea if this debug works on an Android device.

Bob Jones gravatar imageBob Jones ( 2023-09-07 23:15:00 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools


Asked: 2023-09-06 12:21:15 +0000

Seen: 290 times

Last updated: Sep 07