I was experimenting with hashcat and aircrack to test WiFi security. The WiFi AP is a WPA2 encrypted network. The tool I used to capture is bettercap, which captured multiple WPA2 handshakes. The problem is that from those multiple handshakes I get two valid passwords for the same AP.

Question is, did I find a WPA2 hash collision or I am getting something wrong?!

Hashes are converted by hashcat tools to mode 22000.

Hashes from hashcat.potfile:


UDATE: More proof that same WiFi AP handshakes(WPA2) have different passwords! enter image description here

enter image description here

  • 1
    $\begingroup$ It's not collision proof, but what you're seeing isn't going to be a collision as the chance of getting one is astronomically low. $\endgroup$
    – forest
    Nov 18, 2022 at 22:46
  • $\begingroup$ So you are imlying that hashcat does a wrong hash calculation in my case ? $\endgroup$
    – Kristi
    Nov 21, 2022 at 9:53


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.