09. WPA WPA2 Personal (PSK) Traffic Decryption

• With Wireshark:
  1. 4-way handshake must be in the capture (required to generate PTK for the targeted client; PTK is used to encrypt data and is unique for each client).
  2. Specify a key (Passphrase PSK or PMK) via: Edit > Preferences > Select IEEE 802.11 from the Protocol list, check "Enable Decryption". Click "Edit" button next to "Decryption Keys"

Ref: https://wiki.wireshark.org/HowToDecrypt802.11

• With airdecap-ng:

airdecap-ng -e <ESSID> -p <passphrase> <capture_pcap>  # pcap must contain handshake