Questions tagged [john-the-ripper]
John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus lots of other hashes and ciphers in the community-enhanced version ("jumbo"). [openwall.com]
122
questions
3
votes
3
answers
20k
views
what order does the incremental mode of john the ripper, brute force passwords in?
I am practicing reversing md5 hashed passwords using John the Riper and was curious about some behaviour. I added the md5 hash of zaa to the top of the file with the hashes and when I ran john ...
- 128k
1
vote
1
answer
972
views
John the ripper - ecryptfs - sample not cracked: 0 password hashes cracked
I tried to use john the ripper on the sample :
ecryptfs_sample_metadata.tar (password is 'openwall')
Which I downloaded from here:
https://openwall.info/wiki/john/sample-non-hashes
If i try
sudo ...
CommunityBot
- 1
1
vote
1
answer
3k
views
Understanding the output of John the Ripper
The hash I am trying to break is 279412f945939ba78ce0758d3fd83daa, it's part of a task for learning John.
I created a file hash.txt using: echo -n 279412f945939ba78ce0758d3fd83daa > hash.txt.
Then, ...
CommunityBot
- 1
1
vote
1
answer
1k
views
John The Ripper hash does not correlate with hashcat example hash
I want to recover a zip password using hashcat.
hashcat requires the hash of the desired password.
In order to obtain it, I have tried using zip2john using:
sudo zip2john /home/kali/Desktop/myfile.zip ...
CommunityBot
- 1
1
vote
1
answer
3k
views
John the Ripper Custom Dynamic Hash Function Usage
I have created a custom dynamic hash function comprised of a series of different existing hash functions chained together. I'll spare you the exact details because it's for a class assignment.
I've ...
CommunityBot
- 1
6
votes
3
answers
30k
views
Brute force alphanumeric password using JohnTheRipper
I recently recovered a zip archive with some files I need access to, but I can't remember the password. All I can remember is that the password was short (around 3-4 characters), and contained only ...
- 1
11
votes
1
answer
85k
views
show previously hacked passwords with John The Ripper
I tried to crack my windows passwords on the SAM file with john the ripper, it worked just fine, and it shows me the password. But when i try to hack the same file again, john just tells me :
Loaded ...
1
vote
1
answer
381
views
John the Ripper / Hashcat rule, reject candidate if char at position X is the same as character at position Y
I'm using John to generate some word lists and I'm trying to figure out the most optimized way to do the next step. What I want to do is add ever possible 3 digit number to a set where the first digit ...
CommunityBot
- 1
2
votes
1
answer
431
views
Cracking password with static prefix and suffix
I found a pattern password generation that works like that:
sha1("very long static prefix text blablabla "+password+" very long static suffix text");
I tried hashcat combined ...
- 947
-1
votes
1
answer
4k
views
John the ripper 0 password hashes cracked, 38 left
Kali linux latest build trying to use John the Ripper
I have the hashes in a file called userhash.txt
So I try this: (just starting to see if it works)
john --wordlist=word.lst userhash.txt
Using ...
- 128k
2
votes
1
answer
155
views
John the Ripper - Zip Password help - Latter half digit command advice
I'm trying to use John to recover some old ZIP files with a password I remember half. One half being a word, the latter half being a mix of four to six digits.
I remember the word, but not the digits ...
- 947
2
votes
1
answer
421
views
Opening password file with John The Ripper
I have an old Windows domain SMB sniffer file circa 1998 and just out of interest I want to see if I can crack it now with John The Ripper. I believe the file was generated using the L0phtCrack SMB ...
CommunityBot
- 1
1
vote
0
answers
945
views
John not cracking an NTLM hash
I have been trying to do it with john the ripper as the following:
john --FORMAT=NT --wordlist=~/usr/share/wordlists/rockyou.txt hash.txt
the hash I am trying to crack is:
Computer:1001:...
- 128k
0
votes
1
answer
196
views
How to create a hash file of a .dmg file for use in JTR?
I have a .dmg file on my MacBook. I have forgotten the password of the .dmg file and now I'm not able to access the files in it.
I tried using John the Ripper. However, whenever I run john --format=...
- 128k
1
vote
1
answer
187
views
john the ripper tool - how to combine wordlist with incremental modes?
In hashcat, when we need to crack password based on wordlist, but additionally want to try partly bruteforce random ASCII characters in the end of any entry from the wordlist, we can use the following ...
- 9,443
0
votes
0
answers
474
views
Unable to open multipart zip with john the ripper
I have this multiple-part zip files as a list of {File.zip.001, File.zip.002, ..., File.zip.013} that happen to be protected by password.
When I try to unzip them using the Gnome GUI, I see click on ...
- 1
6
votes
3
answers
12k
views
Does john the ripper not support yescrypt?
I'm learning about password attacks using john and am trying to use it for bruteforcing my shaddow file. I created a user called newuser with password stuff and then used
sudo unshadow /etc/passwd /...
- 9,443
0
votes
1
answer
132
views
Is it possible to use hashcat or john the ripper on a .drmz file?
I have n .drmz files which I can read with Javelin PDF Reader. Obviously to access the content I need a password, which I have, the same for each file.
In case I don't have the password is there a way ...
- 3
0
votes
0
answers
200
views
JohnTheRipper not working
I'm using this command to try to crack the hashes or the "contrasena" file and it doesn't do anything. It only says using default input encoding but nothing after.
john --wordlist=/usr/share/...
- 128k
0
votes
0
answers
63
views
Variant of words for John
Is it possible to specify a mask (of sorts) on the command like with John the Ripper where most of the words are known (but not the permutations used in the passphrase)?
Example: If part of the ...
- 12.2k
1
vote
1
answer
2k
views
John the Ripper method takes so much time to crack the hashcat file
Does John the Ripper method take so much time to crack the password? It's been 3 hours since the process started. No output yet and my PC specs are lower than you think.
Hashcat:
Airtel-My WIFI-BMF422-...
2
votes
1
answer
8k
views
John The Ripper Error: No password hashes loaded when cracking a zip file in kali linux
I was practicing bruteforce attacks using John The Ripper. I want to crack a zip file. I obtained the hash and stored it in a zip file but when I attempt to crack the zip file it is giving me an error ...
- 1
1
vote
2
answers
1k
views
John The Ripper - how to try all combinations from individual given expressions in a password list?
In order to understand what should be done in a real user case, I made this test:
I created a GnuPG key, with the passphrase twothree
I exported the private key part of it (ASCII armored)
I generated ...
CommunityBot
- 1
1
vote
0
answers
80
views
Blank decrypted Windows 10 passwords [duplicate]
I'm getting hashes from Windows 10 SAM using samdump2, then pass this to John the Ripper, with the --format=NT and --show arguments, and get:
username::1001:aad3b435b51404eeaad3b435b51404ee:...
- 128k
0
votes
1
answer
1k
views
John The Ripper succedeed in finding password without printing it
Some days ago I tried to found the password of a file encrypted with AxCrypt 1.x.
I tried John The Ripper and HashCat, but for unknown reason with the last one I failed, and I will open a new thread ...
- 230
1
vote
2
answers
2k
views
What is the plaintext password of 'hash part 1' in the shadow file?
In Immersive Labs lab "Password Hashes II"
What is the plaintext password of 'hash part 1' in the shadow file?
shadow.txt contains:
part1:$6$WJ9Y7LHr$S3SdnPsXhCzHetPz0CL6TL7gZdeVK/...
- 128k
1
vote
0
answers
164
views
"john --format=axcrypt" is not returning results
I would like to open a mysterious old file that I found on my Hard Disk, the contents of which I do not know nor can I guess from its name (PB-mp4-rar.axx).
The file was password-protected with the ...
CommunityBot
- 1
1
vote
0
answers
283
views
Cracking passwords following rules with John or hashcat
I would like to crack the forgotten password of a very old archive file (rar) with JTR or hashcat.
I remember it was starting with a certain number from a set of numbers e.g.
prefix number from the ...
- 128k
3
votes
1
answer
4k
views
How do I select the correct hash value / Why is my hash so extremely long?
I have used zip2john to get the hash for a zip file like that:
zip2john.exe myfile.zip > hash.txt
john told me:
ver 2.0 myfile.zip/SomeDir/SomeFile.itv PKZIP Encr: cmplen=11813, decmplen=20364, ...
- 141
0
votes
0
answers
24
views
How I do read what john already did / how far he progressed? [duplicate]
I let the app run since around 2 days.
The app tells me to press q to quit and any other key to show the status.
I do that from time to time.
However, I do not understand how to read what I am seeing.
...
- 141
2
votes
0
answers
2k
views
John The Ripper: "No such file or directory" [closed]
I am using John the Ripper jumbo release on Windows:
1.9.0-jumbo-1 64-bit Windows binaries
I am told that there MIGHT be 2 different passwords in the zip file.
To avoid problems, I should pick only 1 ...
- 12.2k
2
votes
1
answer
3k
views
kali linux encrypting passwords with yescrypt - how to change?
I'm using John The Ripper for password cracking and adding new users/passwords to test it out. When I create a new user and password, the hash starts with $y$ which is from yescrypt. When testing a ...
- 1,820
0
votes
1
answer
1k
views
How does john the ripper crack ssh private key passphrases?
How does John The Ripper work when trying to crack passphrase of a private ssh key? What steps are involved when it tries to do so? What's the role of ssh2john in the whole process?
CommunityBot
- 1
2
votes
1
answer
8k
views
Decrypting a password-protected 7z file with Delta filter fails
I have made a 7z archive using Delta filter containing a wav file and I have protected it with a password. I am running a terminal in Kali Linux. My problem is that I cannot get the password cracked ...
- 128k
7
votes
1
answer
7k
views
Why won't pdf2john extract the password hash of this encrypted pdf? Getting blank results
New to the community, and to JtR and Hashcat as a whole, but after searching for a few days I couldn't find a solution to this specific problem.
I have a password protected PDF file that I'm trying ...
- 1
6
votes
3
answers
29k
views
Is it possible to crack any SHA1 hashed password
I'm trying to understand how easy it is to crack a SHA1 hashed password. I have a training database giving hundreds of password hashed.
I have tried to use some online tools to crack them and I have ...
0
votes
1
answer
15k
views
John the Ripper is unable to crack my SHA1 hashed password
John the Ripper is unable to crack my SHA1 hashed password:
john --wordlist=rockyou.txt testing.txt
Whenever I do this in Kali Linux, I get this response:
Loaded 1 password hash (Raw-SHA1 [SHA1 256/...
- 128k
1
vote
2
answers
1k
views
John The Ripper unable to crack long PDF passwords
Steps I follow:
I protected a PDF with a long password (I am trying with 38 characters password).
I created a dictionary that contains the password to crack the PDF with John the Ripper.
I run john --...
CommunityBot
- 1
0
votes
0
answers
282
views
john the ripper not not loading hashes
I created an unshadowed file to run through john, it worked fine. I created some additional users and created a new file with those hashes in there. I run john and get
Using default input encoding: ...
- 128k
2
votes
1
answer
1k
views
John the Ripper: Output meaning - wordlist mode
Does the result output line of john the ripper show all the words tried?
E.g. does this line
0g 0:00:00:08 DONE (2022-03-11 06:00) 0g/s 1665Kp/s 1665Kc/s 1665KC/s 99CS .. 9999
mean that john tried all ...
- 121
0
votes
1
answer
275
views
Using John or hashcat when password stub is leaked by weak crypto
I'm pentesting a system (call it X) which uses an internal secret key. Due to weaknesses in the crypto, I can determine:
The SHA1 hash of the key (stored as a checksum)
With high probability, the ...
- 9,443
0
votes
0
answers
197
views
Issue with John the ripper with new version of kali
I have just installed the most recent version of Kali Linux and I am using john the ripper (version 1.9.0-jumbo) to crack passwords in shadow.
I have followed the following tutorial cracking linux ...
- 128k
1
vote
2
answers
8k
views
John The Ripper does not load password hash, how can I fix it?
I want to crack a specific hash password with JTR:
48bb6e862e54f2a795ffc4e541caed4d
I put this hash in a txt file like this:
echo '48bb6e862e54f2a795ffc4e541caed4d' > hash.txt
and I run JTR in ...
1
vote
1
answer
2k
views
why doesn't john work on an unshadow file [duplicate]
I was trying to unshadow my passwd and shadow file on the new version of john. However, every time I try to use john to decrypt the hash it throws an error.
Using default input encoding: UTF-8
No ...
- 128k
0
votes
1
answer
2k
views
pwdump8-8.2 correct hash for Microsoft Account Win10
I am having a real issue cracking one NT hash i've pulled from my system for a Microsoft Account.
I used - PwDump8.2
I have an admin account unlocked on the system and can access most files.
I know ...
- 135k
1
vote
1
answer
2k
views
john failed to crack .zip file? [duplicate]
I have a .zip file and I want to crack its password using john.
first I use zip2john:
then I use john for cracking the password:
but after 10 seconds, john stop cracking and exit.
what's wrong?
- 128k
8
votes
2
answers
54k
views
How to crack `salt + SHA256(salt + password)` hashes with JTR?
I have a set of password hashes.
Here is an example:
9e74437e97ff201ff38416138a22a7f3adfa3b9c10e947481bd94b16eed7df6b6e2806
From the source code of the application generating this hash I learned that ...
- 1,504
0
votes
1
answer
5k
views
John the ripper not able to crack the password
I generated two hashes from this site:
Plaintext 1 (p1): world
Salt 1 (s1): hello
Hash 1 (h1): 936a185caaa266bb9cbe981e9e05cb78cd732b0b3280eb944412bb6f8f8f07af
Plaintext 2 (p2): world2
Salt 2 (s2)...
- 128k
1
vote
0
answers
2k
views
John the Ripper doesn't crack passwords when I use wordlists [duplicate]
Title says it all, I can't tell if John is just crashing or "gives up" on cracking the hash. First I start off by creating an md5 hash out of a word I KNOW is on the rockyou.txt wordlist:
echo -n '...
- 128k
2
votes
1
answer
10k
views
John the Ripper Brute Force not working (Windows Hash)
I'm pentesting for a class in Kali Linux, cracking a Windows 7 password. I mounted the windows' hard drive in Kali, ran PWDUMP7 and got the hashes saved on the desktop. It's only showing some of the ...
- 128k