Questions tagged [john-the-ripper]

John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus lots of other hashes and ciphers in the community-enhanced version ("jumbo"). [openwall.com]

Filter by
Sorted by
Tagged with
0
votes
0answers
89 views

cracking HMAC-SHA1 when the password and seed are inverted

I happen to have a few hashes generated with code that did this (it has been changed to use a more "standard" bcrypt call): $ python3 >>> import hmac >>> hmac.new(b'The ...
1
vote
1answer
158 views

Unable to get John the Ripper to crack PDF password

I am new to Kali Linux and JTR but am playing around trying to crack a PDF file. I set the PDF Password to test so it's a known password on my own file. For whatever reason JTR appears to finish ...
1
vote
1answer
103 views

How to apply custom filters for John The Ripper when cracking RAR3 archive password?

My problem is that I'm trying to crack RAR file with is encrypted with RAR3 encryption. Decided to try with John The Ripper. Here are clues I have from my friend. Max password length is 8 Only ...
0
votes
0answers
232 views

Decrypting a password-protected 7z file with Delta filter fails

I have made a 7z archive using Delta filter containing a wav file and I have protected it with a password. I am running a terminal in Kali Linux. My problem is that I cannot get the password cracked ...
1
vote
1answer
466 views

Use John the Ripper to break Password Protected Zip

I installed kali linux, that comes with John the ripper. I have a password-protected zip file. I'm pretty sure the password is complex. I first convert the zip into a hash: sudo zip2john FILE_LOCATION ...
0
votes
1answer
256 views

John The Ripper and PBKDF2-HMAC-SHA1

I am trying to hash a list of passwords with PBKDF2-HMAC-SHA1 and then crack them using John. However, John does not recognise the hashes and I get a No Hashes Found error. It works with SHA256, but I ...
0
votes
1answer
224 views

John The Ripper - find password when you know a part of it

I left my old job a few years back and wanted to check a few of my old pdf payslips but for the life of me I can't remember the password. I've tried using John The Ripper in incremental mode because I ...
0
votes
0answers
212 views

Getting an error when running John The Ripper on 7zip file

I've never really worked with this tool, John Jumbo 1.9. I'm just curious since people say 7zip is a secure way of encrypting files, so I wanted to try it myself. Anyways, I encrypted a file with 7z, ...
0
votes
0answers
14 views

Is it possible to have and use a dynamic dictionary for brute-forcing? [duplicate]

For some reason - totally useless for the question - I have this PDF file with a password I forgot and I have no way to remember. I know for a fact (the person who created and gave me this PDF told me ...
0
votes
0answers
74 views

How does JtR crack password protected documents?

I've been trying to figure this out using an encrypted zip file as an example. I am quite familiar with the idea that PBKDF2 creates a key drivered form a password and then that key is used to ...
0
votes
0answers
53 views

How to use Wordlist to crack a password which have “ ”(space) in it?

I am new to this forum and this is the first time I try "John the Ripper". Currently I forget a password but I remember that there is a space inside it like John-+the Ripper@putty I would like to ...
3
votes
1answer
2k views

“john --format=md5” caused “Unknown ciphertext format name requested” error

This is known md5 hash for Kioptrix: Level 1.1 (#2) Linux unshadow file wolf@linux:~$ cat md5hash.txt root:$1$FTpMLT88$VdzDQTTcksukSKMLRSVlc.:0:0:root:/root:/bin/bash john:$1$wk7kHI5I$...
0
votes
1answer
59 views

Very beginner question about JtR

I Have lost my zip file password and I tried to recover it with Windows 10, using John the Ripper 1.9.0 Jumbo. Things I know from this password: 9 to 11 characters Alphabetics A B E F and a b e f (...
0
votes
1answer
74 views

John the Ripper / Hashcat rule, reject candidate if char at position X is the same as character at position Y

I'm using John to generate some word lists and I'm trying to figure out the most optimized way to do the next step. What I want to do is add ever possible 3 digit number to a set where the first digit ...
2
votes
1answer
133 views

Crack windows excel password

I have many password protected microsoft excel worksheet and I need to be able to edit it. I have forgotten the password, and I know that I can edit the file and take out the password check, but I ...
0
votes
0answers
30 views

John the Ripper is not showing what the acutal unhashed password is

I am using John the Ripper to crack a password hash for a school assignment and I am having some issues. John says that the password hash has been cracked but I cannot see what the actual password for ...
0
votes
0answers
37 views

John the Ripper [duplicate]

I've already cracked a PDF with pdf2john but it doesn't show the password. What could be the problem? (The password isn't blank.)
0
votes
1answer
164 views

JtR Password hash not recognized

I am attempting to encrypt some passwords by hand to use in a project with JtR. Unfortunately, the program is having difficulty recognizing the hash types of the passwords after hashing them. ...
0
votes
0answers
47 views

john ripper and option --mask

I have a text file parole.txt containing the dictionary to be passed to john with the --wordlist option. Here is an extract of the file mamma papa libro ... ... if I use the --mask=?u?w?d option I ...
0
votes
0answers
113 views

John the ripper - ecryptfs - sample not cracked: 0 password hashes cracked

I tried to use john the ripper on the sample : ecryptfs_sample_metadata.tar (password is 'openwall') Which I downloaded from here: https://openwall.info/wiki/john/sample-non-hashes If i try sudo ...
1
vote
0answers
433 views

John the Ripper doesn't crack passwords when I use wordlists

Title says it all, I can't tell if John is just crashing or "gives up" on cracking the hash. First I start off by creating an md5 hash out of a word I KNOW is on the rockyou.txt wordlist: echo -n '...
0
votes
0answers
107 views

Aircrack pause and resume (john+crunch)

I would like to pause an aircrack brute force attack and resume it later. I found this How to continue your Aircrack-ng Bruteforce where you left off?, but the command that I am executing is the ...
2
votes
2answers
938 views

dictionary attack hashing algorithm

Does the kind of algorithm used to hash passwords have any advantages or disadvantages in a dictionary attack? i.e. SHA256, MD5, etc. or is it just the dictionary that is used by the attacker matters? ...
0
votes
1answer
109 views

Cracking less than 4 letter linux password using john

I am trying to crack a less than 4 character Linux password using john. I unshadowed my password into file.txt I use the following command: john -incremental file.txt the output is: 0g 0:00:00:04 ...
0
votes
0answers
58 views

Issue using John The Ripper

First things first, I'm a newbie so, bear with me... I created a word list with a combination of a possible password for a certain user using Crunch (it's the dictionary output) and need to use John ...
0
votes
0answers
2k views

Unable to start hashcat in mode 13600 WinZip : Separator Unmatched

I have a zip file containing a JPEG image of size 3.5 MB, encrypted with AES-256. I used WinZip for the creation of the zip file. In order to create the hash of the zip file, I used John The Ripper's ...
2
votes
3answers
17k views

How do i crack an id_rsa encrypted private key with john the ripper

I am trying to crack a password protected id_rsa, with john the ripper. But it doesn't find the correct password for some reason. I have create a new user and generated a new id_rsa with ssh-keygen (...
0
votes
0answers
73 views

Cracking a ZIP-File password [duplicate]

This might be a stupid question, but I do not have a lot of knowledge about this kind of profession. I have a password-protected .zip file, and I want to know how to crack it. I have tried "zip2john" ...
0
votes
0answers
34 views

Cracking zip password [duplicate]

I am trying to decode a zip file password decoded form of: %3C%7C%3D3r%28Strong%29 I have tried to convert in to MD5 hash and use john the ripper to crack the password. Can someone explain how to do ...
1
vote
1answer
814 views

John the Ripper Custom Dynamic Hash Function Usage

I have created a custom dynamic hash function comprised of a series of different existing hash functions chained together. I'll spare you the exact details because it's for a class assignment. I've ...
0
votes
1answer
1k views

John the ripper(kali linux) cant load hashes

I am trying to crack a md5 hash using a word list with john the ripper i used the following command: john --format=raw-md5 --wordlist=/usr/share/wordlists/rockyou.txt.gz /root/md5.txt And i always ...
1
vote
1answer
97 views

JohnTheRipper Advanced Mask

I have problem to construct advanced mask to crack hash of 7zip file. The password have 16 chars where are all lower, upper, decimal and !@#$%-_=+: Main information is that any char can't duplicate ...
-4
votes
1answer
597 views

How to use hashcat to crack a password made with openssl-passwd? [closed]

I want use hashcat or John the Ripper to crack the hash of a password. I know the password was created using the following command: openssl passwd -crypt -salt tl ******** The asterisks, of course, ...
1
vote
0answers
25 views

Trying to customize john rules, require at least one symbol in passwords

I"m trying to crack passwords that contains at least one symbol, e.g qwe@123 I'm reading through the cheat sheet here, didn't find anything relevant, does anyone know?
0
votes
1answer
79 views

John stdout to Hydra

I'm trying to use a John ruleset which seems to take up more space than I have available. Is there a way to pipe John into Hydra?
1
vote
0answers
115 views

Using John the Ripper with custom encryption function

I have a working script done with python to do dictionary attack on a few hashes import hashlib def main(): print("Starting...") users = [] with open('users.txt') as f: for line ...
0
votes
1answer
230 views

XVWA PBKDF2 with sha256 and 1000 iteration

In XVWA (Xtreme Vulnerable Web Application) I presented with an PBKDF2 with sha256 and 1000 iteration as such: <?php function create_hash($password) { // format: algorithm:iterations:salt:...
0
votes
1answer
159 views

How to make John the Ripper output example hashes for a given hash type?

Is it possible to make John the Ripper output example hashes for a given hash type given by the --format= option? This is possible using Hashcat, but currently I look in John the Ripper's source code ...
0
votes
1answer
148 views

Generating passwords with rule: the contents within a 10 characters string must maintain a certain ratio of numbers and letters in no particular order

I'm playing around with Kali and am looking to crack my WPA2 default password. I started generating 10 character passwords with a charset of solely digits and upper alpha lastnight and after 10 mins, ...
0
votes
1answer
542 views

Benchmark Password Cracking Tools

I want to perform a benchmark for the most popular offline password cracking tools (john the ripper and hashcat)? What metrics or approach should i take about benchmarking in order to determine what ...
0
votes
1answer
217 views

Use john to crack passwords with X alphanums and Y symbols

I'd like to use john to crack passwords that has 3 chars and 1 symbol in it, e.g 123$ If I use mask mode I will have to specify it 3 times, -mask='[a-z0-9]?s[a-z0-9][a-z0-9]' -mask='[a-z0-9][a-z0-9]?...
1
vote
1answer
423 views

John the Ripper known part of password [closed]

For migration purposes i need to get the plaintext password for all our accounts, stored in the shadow file. Our system uses usernames in the format "firstname.lastname" and password is either "...
0
votes
0answers
1k views

John the ripper 0 password hashes cracked, 38 left

I'm stuck and new to this and would greatly appreciate any assistance! Kali linux latest build trying to use Jack the Ripper I have the hashes in a file called userhash.txt So I try this: (just ...
0
votes
0answers
63 views

Breaking a tough password using john

I'm trying to crack a pretty advanced password on my computer and I've had it running for about a day on john's default settings. Its gotten through roughly (a day times 23000kp/s) passwords. I have ...
0
votes
0answers
6k views

How do I combine a salt and hash for John The Ripper? [duplicate]

I found a password hash *61A2BD98DAD2A09749B6FC77A9578609D32518DD I found a salt somewhere else. How do I combine these to feed into John the Ripper? When I run John on the hash (minus the *) John ...
1
vote
1answer
569 views

How to tell JohnTheRipper to solve a password using multiple hashes?

I have 6 archive files in 7zip format. They have the same password. I use the perl script 7z2john to generate a hash for each of the archives. I try to combine the hashes into a hashes file, then ...
3
votes
2answers
1k views

John the Riper couldn't crack all the passwoords

I have a password file with 7 passwords, but JTR only could crack 4 and 3 that couldn't. What it's the reason? C:\tmp\john179j5\run>john --show shadow.txt root:password:12923:0:99999:7::: student1:...
2
votes
0answers
733 views

Brute force hex password with exactly two special characters using JohnTheRipper

I want to optimize the way I'm using John the Ripper. I have a password with a know length (9) that consists only of (lower-case) hex characters and exactly two special characters. First I tried ...
4
votes
3answers
14k views

Is it possible to crack any SHA1 hashed password

I'm trying to understand how easy it is to crack a SHA1 hashed password. I have a training database giving hundreds of password hashed. I have tried to use some online tools to crack them and I have ...
1
vote
2answers
2k views

How to crack forgotton KeePass password when knowing most of the password

A few days ago I changed my KeePass password and forgot it unfortunately. It isn't that much different from the previous one, but I kept trying and trying and it says it's incorrect I found https://...