Watch your first terminal (airodump-ng). In the top right corner, you will see the handshake indicator. When a handshake is captured, you will see a message like: .
If valid, Aircrack-ng will show “1 handshake” in the output. aircrack-ng handshake
Your interface will typically be renamed to wlan0mon . You can verify this by running iwconfig . You should see "Mode: Monitor." You are now listening to the raw radio waves in your environment. Watch your first terminal (airodump-ng)
Replace <AP_MAC> and <channel> accordingly. The output files will begin with capture-01.cap . If valid, Aircrack-ng will show “1 handshake” in
For very strong passwords (e.g., Uj3kL9!qR@8 ), a dictionary attack will fail. That is why tools like hashcat and john (John the Ripper) are often used for advanced rules and brute-force.
Sometimes you want to use Hashcat (which is faster than Aircrack-ng). Convert your handshake:
sudo aircrack-ng capture-01.cap