Aircrack-ng Handshake -

sudo aircrack-ng capture-01.cap If valid, Aircrack-ng will show “1 handshake” in the output.

sudo airodump-ng --bssid <AP_MAC> -c <channel> -w capture wlan0mon Replace <AP_MAC> and <channel> accordingly. The output files will begin with capture-01.cap . If no client is actively connecting, force reauthentication using aireplay-ng (deauthentication attack): aircrack-ng handshake

sudo airmon-ng check kill Start monitor mode on the interface (e.g., wlan0): sudo aircrack-ng capture-01

WPA handshake: <AP_MAC> The .cap file now contains the handshake. Press Ctrl+C to stop airodump-ng . To verify the handshake explicitly: sudo aircrack-ng capture-01.cap If valid