Related: How to Extract Saved WiFi Passwords in Python. If you're in this field for a while, you might have seen the airodump-ng utility that sniffs, captures, and decodes 802.11 frames to display nearby wireless networks in a nice format, in this tutorial, we will do a similar one. If the PMK is not valid, then it's just going to try the next password.Have you ever wanted to build a tool to display nearby wireless networks along with their MAC address and some other useful information? Well, in this tutorial, we are going to build a Wi-Fi scanner using the Scapy library in Python. If the PMK is valid, then the password that was used to create the PMK is the password for the target AP. It will try all of the passwords, and will combine each password with the name of the target AP to create a PMK, then compare the PMK to the handshake. Now click Enter, and aircrack-ng is going to go through the list of the password. We will use aircrack-ng, the file name that contains the handshake, wep_handshake-01.cap, -w and the name of the wordlist, text.txt. If the PMK wasn't valid, then aircrack-ng tries the next password. The password that was used is the password for the target AP if the PMK is valid. It is encrypted in certain way, and compare the PMK to the handshake.

It is not like just combining the password and the BSSID.

This PMK is created by using an algorithm called PBKDF2. The aircrack-ng will be going through the wordlist file, combine each password with the name of the target AP, and create a Pairwise Master Key(PMK). Now we can use aircrack-ng to crack the key for the target AP. Now we've captured the handshake, and we have a wordlist ready to use. To crack WPA or WPA2, we need to first capture the handshake from the target AP and second have a wordlist which contains a number of passwords that we are going to try.

How to use aircrack as a scanner