John The Ripper does not load password hash, how can I fix it?

Question

I want to crack a specific hash password with JTR:

48bb6e862e54f2a795ffc4e541caed4d

I put this hash in a txt file like this:

echo '48bb6e862e54f2a795ffc4e541caed4d' > hash.txt

and I run JTR in this way:

john hash.txt --format=md5crypt --wordlist=/Users/ludo/Documents/TryHackMe/Dizionari/rockyou.txt

The result of John is:

ludo@MinidiLudovico CrackTheHash % ls hash.txt 
ludo@MinidiLudovico CrackTheHash % john hash.txt --format=md5crypt --wordlist=/Users/ludo/Documents/TryHackMe/Dizionari/rockyou.txt        
No password hashes loaded (see FAQ) 
ludo@MinidiLudovico CrackTheHash %

I'm sure that the password is in the rockyou.txt file because it is easy, and I'm sure that the password was hashed in MD5.

Answer 1

That's not the correct format for an md5crypt hash. They typically start with $1$ - you can see examples of the various md5crypt formats that John accepts in the source code. When John reads your input file (hash.txt), you're telling it to only look for hashes in the md5crypt format - so it ignores the line in the file because it's not formatted correctly.

Your hash is just plain MD5, so you need to use --format=raw-md5 instead of --format=md5crypt

Answer 2

I don't know why but there is a sort of problem with John the Ripper, I uninstalled it with:

brew uninstall john 

And I install another version of it named john-jumbo.

brew install john-jumbo

Now it works perfectly.

Ps. --format=md5crypt doesn't work with my hash so I used --format=raw-md5.