airdecap-ng(1)

airdecap-ng1

Decrypt a wep/wpa crypted pcap file

Usage

airdecap-ng [options] <pcap file>

Overview

airdecap-ng decrypts a WEP/WPA crypted pcap file to a unencrypted one by using the right WEP/WPA keys.

Options

-H, --help

Shows the help screen.

-l

Do not remove the 802.11 header.

-b <bssid>

Access point MAC address filter.

-k <pmk>

WPA Pairwise Master Key in hex.

-e <essid>

Target network SSID. For SSID containing special characters, see https://www.aircrack-ng.org/doku.php?id=faq#how_to_use_spaces_double_quote_and_single_quote_etc_in_ap_names

-p <pass>

Target network WPA passphrase.

-w <key>

Target network WEP key in hex.

Examples

airdecap-ng -b 00:09:5B:10:BC:5A open-network.cap
airdecap-ng -w 11A3E229084349BC25D97E2939 wep.cap
airdecap-ng -e my_essid -p my_passphrase tkip.cap

Releases

9 releases since Debian 4.0 (Etch); the text changed 8 times.

  1. 4.0
  2. 5.0
  3. 8
  4. 9
  5. 10
  6. 11
  7. 12
  8. 13
  9. Arch

--help since Debian 5.0 (Lenny); -H since Debian 5.0 (Lenny).

Author

This manual page was written by Adam Cecile <[email protected]> for the Debian system (but may be used by others). Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or any later version published by the Free Software Foundation On Debian systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL.

From aircrack-ng 1.7-7 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.