Questions tagged [john-the-ripper]

John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus lots of other hashes and ciphers in the community-enhanced version ("jumbo"). [openwall.com]

Filter by
Sorted by
Tagged with
0 votes
0 answers
25 views

Cracking password with static prefix and suffix

I found a pattern password generation that works like that: sha1("very long static prefix text blablabla "+password+" very long static suffix text"); I tried hashcat combined ...
user avatar
0 votes
0 answers
42 views

Cracking HS-256 signed JWTs with large payloads

I'm testing a site that authenticates using an HS-256 signed JWT. However the json payload inside the JWT is about 2500 characters. This has become an impediment to trying to crack the signing key. My ...
user avatar
  • 131
2 votes
1 answer
100 views

John the Ripper: Output meaning - wordlist mode

Does the result output line of john the ripper show all the words tried? E.g. does this line 0g 0:00:00:08 DONE (2022-03-11 06:00) 0g/s 1665Kp/s 1665Kc/s 1665KC/s 99CS .. 9999 mean that john tried all ...
user avatar
  • 21
0 votes
1 answer
111 views

Using John or hashcat when password stub is leaked by weak crypto

I'm pentesting a system (call it X) which uses an internal secret key. Due to weaknesses in the crypto, I can determine: The SHA1 hash of the key (stored as a checksum) With high probability, the ...
user avatar
0 votes
0 answers
76 views

Issue with John the ripper with new version of kali

I have just installed the most recent version of Kali Linux and I am using john the ripper (version 1.9.0-jumbo) to crack passwords in shadow. I have followed the following tutorial cracking linux ...
user avatar
0 votes
2 answers
724 views

John The Ripper does not load password hash, how can I fix it?

I want to crack a specific hash password with JTR: 48bb6e862e54f2a795ffc4e541caed4d I put this hash in a txt file like this: echo '48bb6e862e54f2a795ffc4e541caed4d' > hash.txt and I run JTR in ...
user avatar
0 votes
0 answers
83 views

John The Ripper fails to find password existing in the wordlist

I made an Ethereum wallet using a complex password containing ?[-_$> characters. I ran john against the hash generated by ether2john.py: $ ethereum2john.py path_to_my_ethereum_wallet >wallet....
user avatar
  • 203
1 vote
1 answer
232 views

why doesn't john work on an unshadow file [duplicate]

I was trying to unshadow my passwd and shadow file on the new version of john. However, every time I try to use john to decrypt the hash it throws an error. Using default input encoding: UTF-8 No ...
user avatar
0 votes
1 answer
343 views

pwdump8-8.2 correct hash for Microsoft Account Win10

I am having a real issue cracking one NT hash i've pulled from my system for a Microsoft Account. I used - PwDump8.2 I have an admin account unlocked on the system and can access most files. I know ...
user avatar
  • 5
0 votes
1 answer
232 views

john failed to crack .zip file? [duplicate]

I have a .zip file and I want to crack its password using john. first I use zip2john: then I use john for cracking the password: but after 10 seconds, john stop cracking and exit. what's wrong?
user avatar
  • 1
0 votes
1 answer
2k views

John the ripper not able to crack the password

I generated two hashes from this site: Plaintext 1 (p1): world Salt 1 (s1): hello Hash 1 (h1): 936a185caaa266bb9cbe981e9e05cb78cd732b0b3280eb944412bb6f8f8f07af Plaintext 2 (p2): world2 Salt 2 (s2)...
user avatar
0 votes
0 answers
225 views

John The Ripper numbers mask

I'm using john on Windows and I use pdf2john. What do I have to do to crack this password? I saw previous passwords and they were 4 digits (1234), possibly there may be more now. currently trying to ...
user avatar
  • 1
3 votes
2 answers
3k views

Does john the ripper not support yescrypt?

I'm learning about password attacks using john and am trying to use it for bruteforcing my shaddow file. I created a user called newuser with password stuff and then used sudo unshadow /etc/passwd /...
user avatar
2 votes
0 answers
155 views

Why is John returning gibberish for cracked hashes

I've been messing around with John, and when I attempt to crack an SSH hash, I receive this output. Any clue why the cracked hash is displaying the gibberish?? I used ssh2john to convert the key to a ...
user avatar
0 votes
0 answers
93 views

Password Progress running John the Ripper

the old notebook i'm running John at is really slow. It runs now for over 10 days to get the password from my own (i swear its my own) keepass database. I even don't need the whole password, the first ...
user avatar
  • 1
1 vote
1 answer
5k views

John the Ripper is unable to crack my SHA1 hashed password

John the Ripper is unable to crack my SHA1 hashed password: john --wordlist=rockyou.txt testing.txt Whenever I do this in Kali Linux, I get this response: Loaded 1 password hash (Raw-SHA1 [SHA1 256/...
user avatar
0 votes
2 answers
1k views

Does John the Ripper automatically account for salt and hash?

I have an embedded device running Armbian which I was able to get the drive image from. The entry in /etc/shadow combined with /etc/passwd after unshadowing is this: root:$6$TV6ML2bG$TncnN/adtU9xaQs/...
user avatar
0 votes
1 answer
145 views

Does john the ripper need to be given the hash format in order to crack it?

Doing some hash rooms on THM and whenever I run the hash files they give me ill just start like this. john --wordlist=rockyou.txt hashfile It will run and then output with a bunch of warnings telling ...
user avatar
  • 1
1 vote
1 answer
230 views

Opening password file with John The Ripper

I have an old Windows domain SMB sniffer file circa 1998 and just out of interest I want to see if I can crack it now with John The Ripper. I believe the file was generated using the L0phtCrack SMB ...
user avatar
17 votes
1 answer
7k views

John the ripper password cracked or not?

I have the shadow file from an embedded device running linux. Trying to use John to crack it. There is only the 'root' hash in the shadow file. 12 seconds in, John finds the password for 'root', but ...
user avatar
0 votes
1 answer
465 views

cant understand the output of John the ripper

The hash I am trying to break is 279412f945939ba78ce0758d3fd83daa, it's part of a task for learning John. I created a file hash.txt using: echo -n 279412f945939ba78ce0758d3fd83daa > hash.txt. Then, ...
user avatar
  • 1
1 vote
0 answers
229 views

Using John the Ripper for Blockchain.info second password

Is there a way to use JtR for Blockchain.info's (v2) secondary password? I already tried the blockchain2john.py file, and it does not ask for primary password (which I know already) so it is going to ...
user avatar
  • 61
0 votes
0 answers
112 views

Retrieving partially forgotten Linux password: Beginning and end known

I forgot my linux password. I have access to the shadow file (Fedora 33), and I believe it should be possible to retrieve it with John the Ripper as I remember the first 4 characters, I remember the ...
user avatar
2 votes
0 answers
7k views

Can anyone identify the $y$ hash prefix or identify what hash this could be? [closed]

I'm using Kali Linux and trying to crack my own /etc/passwd file with the username "matt". I've unshadowed it however trying to use Hashcat or JohnTheRipper to identify and crack it has ...
user avatar
  • 21
0 votes
0 answers
751 views

John the Ripper add special characters

I have been trying to do this for hours and can´t really figure this out. How can I pass only this range of signs to John the Ripper? ./john hashes --mask=Pepito[1234567890!"·$%&/()=|@#~€]--...
user avatar
  • 1
1 vote
0 answers
357 views

Decrypting xls file using John The Ripper

I need to open an excel file and see its contents which is locked with password. As I made some research on the internet, I have found that only way was a brute force attack. So I used John the Ripper ...
user avatar
0 votes
0 answers
199 views

error john the ripper on id_rsa conversion

Why doesn't my conversion from id_rsa work? I have an empty file in the final conversion idrsa.hash and when I use command cat idrsa.hash to check the result is ERRNO2 no such file or directory : ...
user avatar
  • 1
1 vote
0 answers
559 views

Dynamic format used in John the Ripper jumbo way slower than MDXFind

I'm currently doing some research on a pretty huge list of hashes (approx. 2 millions) and thus I'd like to improve my cracking speed. The hash format is 12 rounds of SHA512(password + salt), which ...
user avatar
  • 111
1 vote
0 answers
645 views

John the ripper output formatting

I'm supposed to crack some passwords from a file. I've done john pwlist.lst > passwords.txt which is outputting the files into my txt file. I'd like to make it such that when John is cracking the ...
user avatar
  • 11
1 vote
0 answers
164 views

Normal for John the Ripper to fail to crack password after having successfully cracked it before? [closed]

The first two or three times I ran it, John the Ripper successfully cracked a password file with a single hashed password. Since then, however, I've only been getting this result (with the same ...
user avatar
1 vote
0 answers
332 views

No password hashes loaded john the ripper [closed]

I'm trying to use john the ripper to vbulletin hashes. Example command here; john -w: D:\Leak\1.2billion.txt -form:dynamic_1007 C:\Users\fatih\Desktop\m2711\m2711-2.hash output: Warning: invalid UTF-...
user avatar
6 votes
1 answer
2k views

For bcrypt why is JTR so much faster than hashcat?

To keep it short I've recently been learning about hashing and password hash cracking on TryHackMe. I was tasked to crack the following hash: $2y$10$0veO/JSFh4389Lluc4Xya.dfy2MF.bZhz0jVMw.V....
user avatar
0 votes
1 answer
268 views

Metasploit - Where has JTR gone?

I remember using jtr in metasploit. jtr_crack_fast is no longer available for me along with other jtr commands. Yes i can still get regular jtr stand alone or just git but still. What happen to jtr in ...
user avatar
2 votes
1 answer
4k views

John The Ripper Error: No password hashes loaded when cracking a zip file in kali linux

I was practicing bruteforce attacks using John The Ripper. I want to crack a zip file. I obtained the hash and stored it in a zip file but when I attempt to crack the zip file it is giving me an error ...
user avatar
0 votes
0 answers
852 views

John the ripper - "no password hashes loaded " for pdf

I'm trying to decrypt a pdf that I no longer have the password for. When I use JohnTheRipper, it can't seem to load any password hashes. Basically, this is what I run. └─$ perl pdf2john.pl /home/...
user avatar
0 votes
0 answers
155 views

Rar (Zip) Decryption, how does it work

I was wondering how rar decryption works. I know that when I enter a password to encrypt my rar file, my password is derived into a key that is used to encrypt the rar file. But how does the ...
user avatar
0 votes
1 answer
372 views

How does john the ripper crack ssh private key passphrases?

How does John The Ripper work when trying to crack passphrase of a private ssh key? What steps are involved when it tries to do so? What's the role of ssh2john in the whole process?
user avatar
0 votes
0 answers
456 views

cracking HMAC-SHA1 when the password and seed are inverted

I happen to have a few hashes generated with code that did this (it has been changed to use a more "standard" bcrypt call): $ python3 >>> import hmac >>> hmac.new(b'The ...
user avatar
  • 125
2 votes
1 answer
3k views

Unable to get John the Ripper to crack PDF password

I am new to Kali Linux and JTR but am playing around trying to crack a PDF file. I set the PDF Password to test so it's a known password on my own file. For whatever reason JTR appears to finish ...
user avatar
1 vote
1 answer
602 views

How to apply custom filters for John The Ripper when cracking RAR3 archive password?

My problem is that I'm trying to crack RAR file with is encrypted with RAR3 encryption. Decided to try with John The Ripper. Here are clues I have from my friend. Max password length is 8 Only ...
user avatar
2 votes
1 answer
4k views

Decrypting a password-protected 7z file with Delta filter fails

I have made a 7z archive using Delta filter containing a wav file and I have protected it with a password. I am running a terminal in Kali Linux. My problem is that I cannot get the password cracked ...
user avatar
  • 21
4 votes
1 answer
32k views

Use John the Ripper to break Password Protected Zip

I installed kali linux, that comes with John the ripper. I have a password-protected zip file. I'm pretty sure the password is complex. I first convert the zip into a hash: sudo zip2john FILE_LOCATION ...
user avatar
1 vote
1 answer
3k views

John The Ripper and PBKDF2-HMAC-SHA1

I am trying to hash a list of passwords with PBKDF2-HMAC-SHA1 and then crack them using John. However, John does not recognise the hashes and I get a No Hashes Found error. It works with SHA256, but I ...
user avatar
  • 13
3 votes
1 answer
4k views

John The Ripper - find password when you know a part of it

I left my old job a few years back and wanted to check a few of my old pdf payslips but for the life of me I can't remember the password. I've tried using John The Ripper in incremental mode because I ...
user avatar
  • 133
0 votes
0 answers
1k views

Getting an error when running John The Ripper on 7zip file

I've never really worked with this tool, John Jumbo 1.9. I'm just curious since people say 7zip is a secure way of encrypting files, so I wanted to try it myself. Anyways, I encrypted a file with 7z, ...
user avatar
0 votes
0 answers
18 views

Is it possible to have and use a dynamic dictionary for brute-forcing? [duplicate]

For some reason - totally useless for the question - I have this PDF file with a password I forgot and I have no way to remember. I know for a fact (the person who created and gave me this PDF told me ...
user avatar
  • 1
3 votes
1 answer
16k views

"john --format=md5" caused "Unknown ciphertext format name requested" error

This is known md5 hash for Kioptrix: Level 1.1 (#2) Linux unshadow file wolf@linux:~$ cat md5hash.txt root:$1$FTpMLT88$VdzDQTTcksukSKMLRSVlc.:0:0:root:/root:/bin/bash john:$1$wk7kHI5I$...
user avatar
  • 337
0 votes
1 answer
287 views

Very beginner question about JtR

I Have lost my zip file password and I tried to recover it with Windows 10, using John the Ripper 1.9.0 Jumbo. Things I know from this password: 9 to 11 characters Alphabetics A B E F and a b e f (...
user avatar
  • 1
0 votes
1 answer
232 views

John the Ripper / Hashcat rule, reject candidate if char at position X is the same as character at position Y

I'm using John to generate some word lists and I'm trying to figure out the most optimized way to do the next step. What I want to do is add ever possible 3 digit number to a set where the first digit ...
user avatar
  • 214
2 votes
1 answer
2k views

Crack windows excel password

I have many password protected microsoft excel worksheet and I need to be able to edit it. I have forgotten the password, and I know that I can edit the file and take out the password check, but I ...
user avatar
  • 21