tldr/pages/common/airdecap-ng.md

airdecap-ng

Decrypt a WEP, WPA, or WPA2 encrypted capture file. Part of Aircrack-ng network software suite. More information: https://www.aircrack-ng.org/doku.php?id=airdecap-ng.

• Remove wireless headers from an open network capture file and use the access point's MAC address to filter:

airdecap-ng -b {{ap_mac}} {{path/to/capture.cap}}

• Decrypt a [w]EP encrypted capture file using the key in hex format:

airdecap-ng -w {{hex_key}} {{path/to/capture.cap}}

• Decrypt a WPA/WPA2 encrypted capture file using the access point's [e]ssid and [p]assword:

airdecap-ng -e {{essid}} -p {{password}} {{path/to/capture.cap}}

• Decrypt a WPA/WPA2 encrypted capture file preserving the headers using the access point's [e]ssid and [p]assword:

airdecap-ng -l -e {{essid}} -p {{password}} {{path/to/capture.cap}}

• Decrypt a WPA/WPA2 encrypted capture file using the access point's [e]ssid and [p]assword and use its MAC address to filter:

airdecap-ng -b {{ap_mac}} -e {{essid}} -p {{password}} {{path/to/capture.cap}}