Partial vs full handshake

[vander]

Hello , I got a WiFi pineapple today and was wondering what the difference between a partial and full handshake was, also does it matter which one I crack?

[dark_pyrro]

A full capture contains all EAPOL messages (M1->M4) along with a beacon frame, as the docs visualize

https://docs.hak5.org/wifi-pineapple/ui-overview/recon#handshakes

Partial captures doesn't contain everything of the above, but can still be possible to crack. You will need at least M2, preferably along with M1 or M3.

If you get a full capture, then use it. Otherwise, just try to crack it with what you got. Use the Hashcat format if you plan to use Hashcat (obviously).

There are tons of info out there about how handshakes work and the Pineapple isn't unique in any way in that sense.

[DramaKing]

Excellentky said. I would just add that if only M1 and M2 are captured, the password is crackable; however, you will not have an indication if the login was successful.