# ZerBea/hcxdumptool

Small tool to capture packets from wlan devices.

Repository: https://github.com/ZerBea/hcxdumptool
Canonical: https://ross.abutalabs.com/products/hcxdumptool
Language: C
License: MIT
License Family: permissive
Topics: pcap, wifi-security, raspberry-pi, pcapng, hashcat, john-the-ripper, penetration-testing-framework, wifi
Last push: 2026-08-14T15:38:08+00:00

## Health v2 (maintenance only)
Score: 79/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 97, release rhythm 45, longevity 100
- inputs: {"age_days": 3111, "days_push": 19, "days_rel": 206, "gap_med": 91.0, "n_releases_24m": 5}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2184, forks 424 (observed 2026-08-28T04:06:23.462783+00:00)

## What it is
hcxdumptool is a C-based command-line tool that captures packets from WLAN devices and runs layer 2 attacks against the WPA protocol to find weak points in your own WiFi networks. It outputs pcapng captures designed to feed into hashcat or John the Ripper via the hcxtools suite, and runs headless on small devices like a Raspberry Pi Zero.

## Use cases
- capture WPA handshakes and PMKIDs from wifi networks for auditing
- test the security of my own wireless network
- capture packets from a wlan device to a pcapng file
- collect hashes for hashcat mode 22000 wifi cracking audits
- run wifi security assessments from a Raspberry Pi
- find weak points in WPA protocol implementations on my network

## When to choose
- you need to capture WPA handshakes or PMKIDs for authorized wifi security audits
- you want pcapng output compatible with Wireshark, tshark, hashcat, or JtR
- you need a lightweight, headless tool that runs on a Raspberry Pi
- you want to pair capture with the hcxtools suite for hash conversion and filtering

## When to avoid
- you want to crack passwords directly - use hashcat or John the Ripper instead
- you need WEP or WPS attacks - use aircrack-ng, Reaver, or Bully
- you need Evil Twin attacks, honeypots, or traffic decryption
- you are on Windows, macOS, or Android - these platforms are unsupported

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, penetration-testing, networking
- domain: security, penetration-testing, networking
- platform: -
- tags: wifi, wpa, packet-capture, pcapng, hashcat, wireless-audit, raspberry-pi, linux

## Member repositories
- ZerBea/hcxdumptool (main) score 79

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:23.462783+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:48:12.941869+00:00, confidence not recorded.
  - readme: https://github.com/ZerBea/hcxdumptool (fetched 2026-08-28T04:06:23.462783+00:00, sha 7b4725574f8f)
- Data as of 2026-08-30T08:39:29.467469+00:00.