You install hcxtools not just to break hashes, but to understand the fragility of the WPA/WPA2 protocol. You install it to test your own EAPOL timeouts, to see if your rogue access point detection is working, to verify that your PMKID vulnerability has been patched.
Allow only necessary ports.
Before you start the installation process, make sure your system meets the minimum requirements for HXCoreOL. These include: hxcoreol install