HCXHASHTOOL(1)

📦
version 7.1.2 · 6 versions
, in ubuntu stonking

💖 NAME 💖

hcxhashtool — the hcx tools set. bestie. that's the whole name, slay ✨

🦋 DESCRIPTION 🦋

okay so, first things first, the vibe check: this is hcxhashtool 7.1.2 (C) 2026 ZeroBeat 💅

usage, verbatim, no notes:

hcxhashtool <options>

and here come the options, all of them, no cap, in order 👑

  • -i <file> — the input: your PMKID/EAPOL hash file goes here 🍓
  • -o <file> — the output: PMKID/EAPOL hash file, writing time 💾
  • -E <file> — output an ESSID list (autohex enabled, iconic)
  • -E stdout — output that same ESSID list to stdout instead (autohex enabled)
  • -L <file> — output an ESSID list, unfiltered and unsorted, feral behavior, we respect it
    • so useful in combination with the hashcat -a9 option, iykyk 🔥
  • --essid-group — convert to ESSID groups in the working directory
    • you get the full advantage of reuse of PBKDF2 ✨ — but not on old hash formats, sorry 😭
  • --oui-group — convert to OUI groups in the working directory
    • not on old hash formats 🫠
  • --mac-group-ap — convert APs to MAC groups in the working directory
    • not on old hash formats 💀
  • --mac-group-client — convert CLIENTs to MAC groups in the working directory
    • not on old hash formats 🙈
  • --type=<digit> — filter by hash type, it's a bitmask moment:
    • 1 = PMKID
    • 2 = EAPOL
    • default is PMKID and EAPOL (1+2=3) 💅
  • --hcx-min=<digit> — disregard hashes with occurrence lower than hcx-min/ESSID
  • --hcx-max=<digit> — disregard hashes with occurrence higher than hcx-max/ESSID
  • --essid-len — filter by ESSID length
    • default ESSID length: 0...32 📏
  • --essid-min — filter by ESSID minimum length
    • default ESSID minimum length: 0
  • --essid-max — filter by ESSID maximum length
    • default ESSID maximum length: 32
  • --essid=<ESSID> — filter by ESSID 🌸
  • --essid-part=<part of ESSID> — filter by part of ESSID (case sensitive, she notices capital letters)
  • --essid-partx=<part of ESSID> — filter by part of ESSID (case insensitive, lowercase era, we love her)
    • locale and wide characters are ignored 🧚
  • --essid-list=<file> — filter by ESSID file
  • --essid-regex=<regex> — filter ESSID by regular expression (regex girlies rise 🔥)
  • --mac-ap=<MAC> — filter AP by MAC
    • format: 001122334455, 00:11:22:33:44:55, 00-11-22-33-44-55 (hex)
  • --mac-client=<MAC> — filter CLIENT by MAC
    • format: 001122334455, 00:11:22:33:44:55, 00-11-22-33-44-55 (hex)
  • --mac-list=<file> — filter by MAC file
    • format: 001122334455, 00:11:22:33:44:55, 00-11-22-33-44-55 (hex)
  • --mac-skiplist=<file> — exclude MAC from file (blocked, blocked, blocked 🚫)
    • format: 001122334455, 00:11:22:33:44:55, 00-11-22-33-44-55 (hex)
  • --oui-ap=<OUI> — filter AP by OUI
    • format: 001122, 00:11:22, 00-11-22 (hex)
  • --oui-client=<OUI> — filter CLIENT by OUI
    • format: 001122, 00:11:22, 00-11-22 (hex)
  • --vendor=<VENDOR> — filter AP or CLIENT by (part of) VENDOR name 🏷️
  • --vendor-ap=<VENDOR> — filter AP by (part of) VENDOR name
  • --vendor-client=<VENDOR> — filter CLIENT by (part of) VENDOR name
  • --authorized — filter EAPOL pairs by status authorized (M2M3, M3M4, M1M4) 👑
  • --challenge — filter EAPOL pairs by status CHALLENGE (M1M2, M1M2ROGUE)
  • --rc — filter EAPOL pairs by replaycount status checked
  • --rc-not — filter EAPOL pairs by replaycount status not checked
  • --apless — filter EAPOL pairs by status M1M2ROGUE (M2 requested from CLIENT) 😈
  • --info=<file> — output detailed information about the content of the hash file
    • no filter options available 🚫
  • --info=stdout — stdout output of detailed information about the content of the hash file
    • no filter options available
  • --info-vendor=<file> — output detailed information about ACCESS POINT and CLIENT VENDORs
    • no filter options available
  • --info-vendor-ap=<file> — output detailed information about ACCESS POINT VENDORs
    • no filter options available
  • --info-vendor-client=<file> — output detailed information about CLIENT VENDORs
    • no filter options available
  • --info-vendor=stdout — stdout output of detailed information about ACCESS POINT and CLIENT VENDORs
    • no filter options available
  • --info-vendor-ap=stdout — stdout output of detailed information about ACCESS POINT VENDORs
    • no filter options available
  • --info-vendor-client=stdout — stdout output of detailed information about CLIENT VENDORs
    • no filter options available
  • --psk=<PSK> — pre-shared key to test 🔑
    • > due to PBKDF2 calculation this is a very slow process, bestie, like genuinely slow 😭
    • no nonce error corrections 💀
  • --pmk=<PMK> — plain master key to test
    • no nonce error corrections
  • --hccapx-in=<file> — input a deprecated hccapx file
    • MESSSAGEPAIR is taken from the hccapx source 📥
  • --hccapx-out=<file> — output to a deprecated hccapx file
  • --hccap-in=<file> — input an ancient hccap file 🏺
  • --hccap-out=<file> — output to an ancient hccap file
    • MESSSAGEPAIR is calculated from the EAPOL MESSAGE
    • > due to missing information, the worst case value is calculated 😬
  • --hccap-single — output to ancient hccap single files (MAC + count)
  • --john=<file> — output to a deprecated john file
  • --vendorlist — stdout output of the complete OUI list, sorted by OUI 📋
  • --help — show this help
  • --version — show version
⚠️ Important notice: hcxhashtool does not do NONCE ERROR CORRECTIONS in case of a packet loss — you get a wrong PTK. that's the whole tea, no filter, protect your PTK bestie 🫶

that's the page, periodt 💖 this was hcxhashtool 7.1.2, (C) 2026 Zero..., and the page is dated July 2026 — love that for us, bye bestie 👑🦋

📦 where this page comes from