airdecap-ng - Man Page

• Remove wireless headers from an open network capture file and use the access point's MAC address to filter: airdecap-ng -b ap_mac path/to/capture.cap
• Decrypt a [w]EP encrypted capture file using the key in hex format: airdecap-ng -w hex_key path/to/capture.cap
• Decrypt a WPA/WPA2 encrypted capture file using the access point's [e]ssid and [p]assword: airdecap-ng -e essid -p password path/to/capture.cap
• Decrypt a WPA/WPA2 encrypted capture file preserving the headers using the access point's [e]ssid and [p]assword: airdecap-ng -l -e essid -p password path/to/capture.cap
• Decrypt a WPA/WPA2 encrypted capture file using the access point's [e]ssid and [p]assword and use its MAC address to filter: airdecap-ng -b ap_mac -e essid -p password path/to/capture.cap

tldr.sh

airdecap-ng [options] <pcap file>

airdecap-ng decrypts a WEP/WPA crypted pcap file to a unencrypted one by using the right WEP/WPA keys.

-H,  --help

Shows the help screen.

-l

Do not remove the 802.11 header.

-b <bssid>

Access point MAC address filter.

-k <pmk>

WPA Pairwise Master Key in hex.

-e <essid>

Target network SSID. For SSID containing special characters, see https://www.aircrack-ng.org/doku.php?id=faq#how_to_use_spaces_double_quote_and_single_quote_etc_in_ap_names

-p <pass>

Target network WPA passphrase.

-w <key>

Target network WEP key in hex.

airdecap-ng -b 00:09:5B:10:BC:5A open-network.cap
airdecap-ng -w 11A3E229084349BC25D97E2939 wep.cap
airdecap-ng -e my_essid -p my_passphrase tkip.cap

This manual page was written by Adam Cecile <gandalf@le-vert.net> for the Debian system (but may be used by others). Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or any later version published by the Free Software Foundation On Debian systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL.

airbase-ng(8)
aireplay-ng(8)
airmon-ng(8)
airodump-ng(8)
airodump-ng-oui-update(8)
airserv-ng(8)
airtun-ng(8)
besside-ng(8)
easside-ng(8)
tkiptun-ng(8)
wesside-ng(8)
aircrack-ng(1)
airdecloak-ng(1)
airolib-ng(1)
besside-ng-crawler(1)
buddy-ng(1)
ivstools(1)
kstats(1)
makeivs-ng(1)
packetforge-ng(1)
wpaclean(1)
airventriloquist(8)

airbase-ng(8), aircrack-ng(1), airdecloak-ng(1), aireplay-ng(8), airmon-ng(8), airodump-ng(8), airodump-ng-oui-update(8), airolib-ng(1), airserv-ng(8), airtun-ng(8), airventriloquist-ng(8), besside-ng(8), besside-ng-crawler(1), buddy-ng(1), easside-ng(8), ivstools(1), kstats(1), makeivs-ng(1), packetforge-ng(1), tkiptun-ng(8), wesside-ng(8), wpaclean(1).