Skip to content

5Ghost WiFi Lab v2.6.0-beta — Clientless PMKID capture (beta)

Choose a tag to compare

View all tags
@pingequalab pingequalab released this 25 Jul 13:38
v2.6.0-beta
a398080

Beta — pairs with 5Ghost firmware 2.6.0-beta.

⚠️ Beta build. Update your 5Ghost to firmware 2.6.0-beta at https://flash.pingequa.com — pick "2.6.0-beta" in the version picker (stable 2.3.0 stays the default).

New: Clientless PMKID capture — on-device UI

  • Capture a WPA/WPA2 PMKID via AUTHPROBE association, without waiting for a client handshake
  • On-device target picker across 2.4 GHz + 5 GHz, a capture-quality gate, and evidence written to the SD card
  • Exports both .22000 (hashcat mode 22000) and a .json capture record for offline analysis on networks you are authorized to test
  • Beta: the capture-to-hash pipeline is verified offline; live-AP end-to-end validation is still ongoing — treat PMKID results as experimental

New: Multi-SSID beacon generation

  • Emit multiple named / multi-BSSID beacons for lab work and detector testing

Improved

  • The scanned AP list is reused when you back out of a capture — no forced rescan between targets
  • On-device crash fixes and capture-reliability hardening

Carried over from 2.5.0-beta

  • WiFi station (client) reconnaissance: list associated clients, targeted deauth, focused handshake capture (2.4 + 5 GHz)
  • BLE multi-round accumulation with cross-scan de-dup; AP vendor identification via the IEEE OUI table

WPA3-SAE handshakes have no offline-crackable hash — 5Ghost flags WPA3 as out of reach rather than pretending otherwise. Use only on networks you are authorized to test.

Loads on Official · Momentum · Unleashed (API 87.1). Self-contained .fap.

Assets 3
Loading