sudo tcpdump -i wlan0 -s 0 -w handshake.cap Note: sudo may not work without root; on non-rooted devices, he used tcpdump -i wlan0 -w capture.cap and hoped the chip allowed promiscuous mode.
ip a On Android, it was wlan0 . Leo asked his friend to disconnect and reconnect to the network. Meanwhile, Leo ran:
aircrack-ng -w /usr/share/wordlists/rockyou.txt handshake.cap He had to download rockyou.txt first: