Thursday, December 6, 2018

wireshark: Viewing encrypted PSK2AES packet

In case, we capture packets encrypted with WPA/WPA2-PSK security in wireshark.  Now, to see that we can do the following procedure.

  • Go to Edit -> Preferences to open the Preferences dialog box.
  • Expand Protocols and select IEEE 802.11.
  • Select: Enable decryption
  • Edit: Decryption Keys
  • Go to WEP and WPA Decryption window
  • Key type: wpa-pwd
  • Key: <passphrase>:<ssid>
  • Example: 12345678:4366ap
  • Click 'Apply' and 'Ok' on all corresponding nested windows.