0

I'm stuck and new to this and would greatly appreciate any assistance! Kali linux latest build trying to use Jack the Ripper

I have the hashes in a file called userhash.txt

So I try this: (just starting to see if it works)

john --wordlist=word.lst userhash.txt 
Using default input encoding: UTF-8
Using default target encoding: CP850
Loaded 38 password hashes with no different salts (LM [DES 128/128 AVX-16])
Press 'q' or Ctrl-C to abort, almost any other key for status
0g 0:00:00:00 DONE (2019-01-24 22:27) 0g/s 2917Kp/s 2917Kc/s 110860KC/s VZHBR..VJHT008
Session completed

then if I do a --show I get 0 password hashes cracked, 38 left Any ideas?

  • 1
    Never used john myself, but it looks to me like it's saying it went through the whole word list and didn't manage to crack any of the passwords. – AndrolGenhald Jan 24 at 22:09
  • 1
    That's what it looks like to me, too. The passwords couldn't be cracked given the wordlist provided . – Stephen Touset Jan 24 at 22:10
  • 3
    I recommend you verify your understanding of the tool by creating a hash for a weak password (something in the wordlist you're using) and adding it to the userhash.txt file, and then verifying that john cracks that one. – Wildcard Jan 24 at 22:30
  • Havent checked what are the ones implemented in Kali, but you have different types of password related tools. a) Dictionary tools (normal or rainbow tables) b) Bruteforce tools. If you are using dictionary ones, maybe it is not in the dictionary. Do note that brute forcing with complex and long passwords could be impossible (too much time) – bradbury9 Jan 25 at 8:47
  • I tried creating a hash on one of those websites then put it into a file. Tried John with a sample wordlist I created (with the password in it) and it worked. Took seconds. So my understanding of the tool and seeing it work is getting better. Original file with hashes was derived from DSinternals: Dumping the contents of ntds.dit files using PowerShell. When I run this hashes.txt file with John and a wordlist it just finishes in seconds. no passwords cracked. If i run it alone ./john hashes.txt it takes days and no results. – Zork Feb 1 at 13:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.