Questions tagged [john-the-ripper]

John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus lots of other hashes and ciphers in the community-enhanced version ("jumbo"). [openwall.com]

Filter by
Sorted by
Tagged with
0
votes
1answer
44 views

XVWA PBKDF2 with sha256 and 1000 iteration

In XVWA (Xtreme Vulnerable Web Application) I presented with an PBKDF2 with sha256 and 1000 iteration as such: <?php function create_hash($password) { // format: algorithm:iterations:salt:...
0
votes
1answer
49 views

How to make John the Ripper output example hashes for a given hash type?

Is it possible to make John the Ripper output example hashes for a given hash type given by the --format= option? This is possible using Hashcat, but currently I look in John the Ripper's source code ...
0
votes
1answer
119 views

Generating passwords with rule: the contents within a 10 characters string must maintain a certain ratio of numbers and letters in no particular order

I'm playing around with Kali and am looking to crack my WPA2 default password. I started generating 10 character passwords with a charset of solely digits and upper alpha lastnight and after 10 mins, ...
0
votes
1answer
201 views

Benchmark Password Cracking Tools

I want to perform a benchmark for the most popular offline password cracking tools (john the ripper and hashcat)? What metrics or approach should i take about benchmarking in order to determine what ...
0
votes
0answers
52 views

John the Ripper: OpenMP mode vs using the “--fork=N” option?

Clang on OSX doesn't support OpenMP by default, so I could not compile JtR with OpenMP support without another Clang installation. However, after looking at the below option, I wonder what the ...
0
votes
1answer
51 views

Use john to crack passwords with X alphanums and Y symbols

I'd like to use john to crack passwords that has 3 chars and 1 symbol in it, e.g 123$ If I use mask mode I will have to specify it 3 times, -mask='[a-z0-9]?s[a-z0-9][a-z0-9]' -mask='[a-z0-9][a-z0-9]?...
1
vote
1answer
200 views

John the Ripper known part of password [closed]

For migration purposes i need to get the plaintext password for all our accounts, stored in the shadow file. Our system uses usernames in the format "firstname.lastname" and password is either "...
0
votes
0answers
558 views

John the ripper 0 password hashes cracked, 38 left

I'm stuck and new to this and would greatly appreciate any assistance! Kali linux latest build trying to use Jack the Ripper I have the hashes in a file called userhash.txt So I try this: (just ...
0
votes
0answers
57 views

Breaking a tough password using john

I'm trying to crack a pretty advanced password on my computer and I've had it running for about a day on john's default settings. Its gotten through roughly (a day times 23000kp/s) passwords. I have ...
0
votes
0answers
1k views

How do I combine a salt and hash for John The Ripper? [duplicate]

I found a password hash *61A2BD98DAD2A09749B6FC77A9578609D32518DD I found a salt somewhere else. How do I combine these to feed into John the Ripper? When I run John on the hash (minus the *) John ...
1
vote
1answer
257 views

How to tell JohnTheRipper to solve a password using multiple hashes?

I have 6 archive files in 7zip format. They have the same password. I use the perl script 7z2john to generate a hash for each of the archives. I try to combine the hashes into a hashes file, then ...
3
votes
2answers
584 views

John the Riper couldn't crack all the passwoords

I have a password file with 7 passwords, but JTR only could crack 4 and 3 that couldn't. What it's the reason? C:\tmp\john179j5\run>john --show shadow.txt root:password:12923:0:99999:7::: student1:...
2
votes
0answers
418 views

Brute force hex password with exactly two special characters using JohnTheRipper

I want to optimize the way I'm using John the Ripper. I have a password with a know length (9) that consists only of (lower-case) hex characters and exactly two special characters. First I tried ...
2
votes
3answers
6k views

Is it possible to crack any SHA1 hashed password

I'm trying to understand how easy it is to crack a SHA1 hashed password. I have a training database giving hundreds of password hashed. I have tried to use some online tools to crack them and I have ...
1
vote
1answer
1k views

How to crack forgotton KeePass password when knowing most of the password

A few days ago I changed my KeePass password and forgot it unfortunately. It isn't that much different from the previous one, but I kept trying and trying and it says it's incorrect I found https://...
1
vote
0answers
32 views

John the Ripper modify passwords before checking

Assume I have a password I want to crack in the following format: 100 times the character 'a' prepended to Some word found in a wordlist John will probably not be able to crack this with the default ...
2
votes
1answer
1k views

How is it that tools like Hashcat, JTR able to bruteforce an NTLMv2 hashes?

With regards to the following question about the feasibility of (brute|dictionary|rainbowtable)-forcing an NTLMv2 hash: How feasible is it for an attacker to brute-force an NTLMv2 response captured ...
4
votes
1answer
1k views

Why won't pdf2john extract the password hash of this encrypted pdf? Getting blank results

New to the community, and to JtR and Hashcat as a whole, but after searching for a few days I couldn't find a solution to this specific problem. I have a password protected PDF file that I'm trying ...
0
votes
1answer
2k views

Generate a wordlist using John the Ripper

I want to generate wordlist with these rules: 8 characters, at least one uppercase letter, at least one lowercase letter, exactly two numbers. I've done a lot of google searching, and can't seem to ...
2
votes
1answer
76 views

Get total, not unique, number of cracked passwords from John the Rippers output?

I am giving John the Ripper a file that may contain duplicate hashes, and get output like this: 2g 0:00:00:01 1.600g/s 3.200p/s 3.200c/s 70227C/s 123456789..abc123 Which represents the total number ...
2
votes
1answer
3k views

John the Ripper Brute Force not working (Windows Hash)

I'm pentesting for a class in Kali Linux, cracking a Windows 7 password. I mounted the windows' hard drive in Kali, ran PWDUMP7 and got the hashes saved on the desktop. It's only showing some of the ...
3
votes
2answers
329 views

John the ripper - creating specific rules

We have a situation where I am not finding any documentation on it. We are trying to scale across multiple machines/job by breaking up the keyspace by complexity. Its a 7 char completely random ...
1
vote
1answer
2k views

John the ripper multiple mask attack

I am going to use John the Ripper on a multi-core server to crack about 400 Windows NT hashes. Depending on my CPU capacities I want to check all passwords that satisfy following masks: ?1?1?1?1?1?1?...
0
votes
3answers
175 views

Is there an easy way to record how long it takes John the Ripper to crack passwords?

We're doing a password audit by loading the password file into John and letting it run for a couple of days. One of the first questions I got in the remediation class was "How long did it take to ...
0
votes
1answer
4k views

Cant crack Responder hashes with John or Hashcat

I ran Responder in a test network and obtained hashes from a Windows machine. The logs for the machine show something like this (some bytes changed for security reasons) and are stored in a file ...
0
votes
1answer
2k views

John the Ripper Character Lists

How is it possible to use or prioritize umlauted characters - ä ö ü ß Ä Ö Ü - whilst brute forcing. I'm not using any wordlist, only dozens of CPU threads via the following command : ./john --fork=...
1
vote
0answers
4k views

John the Ripper doesn't use my wordlist file properly

When I use JtR to crack an encrypted zip file I have, it seems like JtR doesn't go through the wordlist I have ... I do the following steps: $ brew install john-jumbo $ export PATH=$PATH:/usr/local/...
0
votes
1answer
4k views

John the ripper not displaying cracked password [closed]

When using john to crack Windows LM hashes it says it has cracked the passwords but does not display anything. See image below. https://imgur.com/SnltTPK
3
votes
2answers
3k views

what order does the incremental mode of john the ripper, brute force passwords in?

I am practicing reversing md5 hashed passwords using John the Riper and was curious about some behaviour. I added the md5 hash of zaa to the top of the file with the hashes and when I ran john ...