Questions tagged [john-the-ripper]
John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus lots of other hashes and ciphers in the community-enhanced version ("jumbo"). [openwall.com]
122
questions
17
votes
1
answer
8k
views
John the ripper password cracked or not?
I have the shadow file from an embedded device running linux. Trying to use John to crack it. There is only the 'root' hash in the shadow file.
12 seconds in, John finds the password for 'root', but ...
- 171
11
votes
1
answer
85k
views
show previously hacked passwords with John The Ripper
I tried to crack my windows passwords on the SAM file with john the ripper, it worked just fine, and it shows me the password. But when i try to hack the same file again, john just tells me :
Loaded ...
- 679
9
votes
1
answer
81k
views
Use John the Ripper to break Password Protected Zip
I installed kali linux, that comes with John the ripper. I have a password-protected zip file. I'm pretty sure the password is complex. I first convert the zip into a hash:
sudo zip2john FILE_LOCATION ...
- 91
8
votes
2
answers
54k
views
How to crack `salt + SHA256(salt + password)` hashes with JTR?
I have a set of password hashes.
Here is an example:
9e74437e97ff201ff38416138a22a7f3adfa3b9c10e947481bd94b16eed7df6b6e2806
From the source code of the application generating this hash I learned that ...
- 973
7
votes
1
answer
7k
views
Why won't pdf2john extract the password hash of this encrypted pdf? Getting blank results
New to the community, and to JtR and Hashcat as a whole, but after searching for a few days I couldn't find a solution to this specific problem.
I have a password protected PDF file that I'm trying ...
6
votes
3
answers
12k
views
Does john the ripper not support yescrypt?
I'm learning about password attacks using john and am trying to use it for bruteforcing my shaddow file. I created a user called newuser with password stuff and then used
sudo unshadow /etc/passwd /...
- 195
6
votes
3
answers
29k
views
Is it possible to crack any SHA1 hashed password
I'm trying to understand how easy it is to crack a SHA1 hashed password. I have a training database giving hundreds of password hashed.
I have tried to use some online tools to crack them and I have ...
- 433
6
votes
3
answers
30k
views
Brute force alphanumeric password using JohnTheRipper
I recently recovered a zip archive with some files I need access to, but I can't remember the password. All I can remember is that the password was short (around 3-4 characters), and contained only ...
- 171
6
votes
1
answer
7k
views
For bcrypt why is JTR so much faster than hashcat?
To keep it short I've recently been learning about hashing and password hash cracking on TryHackMe.
I was tasked to crack the following hash: $2y$10$0veO/JSFh4389Lluc4Xya.dfy2MF.bZhz0jVMw.V....
- 61
5
votes
2
answers
26k
views
Generate John the Ripper rule
This question asks for pointers about generating JtR rulesets, but the OP states
I understand how to use it to make various permutations from a given wordlist
Could someone please explain that? ...
- 471
5
votes
4
answers
44k
views
How do I crack an id_rsa encrypted private key with john the ripper?
I am trying to crack a password protected id_rsa, with john the ripper. But it doesn't find the correct password for some reason.
I have create a new user and generated a new id_rsa with ssh-keygen (...
- 161
5
votes
1
answer
21k
views
John the ripper passwd file format with salt not working
I'm trying test password strength in one of our e-commerce sites. I'm using john the ripper to brute-force a password file. The algorithm used by PHP is:
$hash = md5($salt . $pass)
No other ...
- 61
4
votes
1
answer
31k
views
"john --format=md5" caused "Unknown ciphertext format name requested" error
This is known md5 hash for Kioptrix: Level 1.1 (#2)
Linux unshadow file
wolf@linux:~$ cat md5hash.txt
root:$1$FTpMLT88$VdzDQTTcksukSKMLRSVlc.:0:0:root:/root:/bin/bash
john:$1$wk7kHI5I$...
- 367
3
votes
2
answers
3k
views
John the Riper couldn't crack all the passwoords
I have a password file with 7 passwords, but JTR only could crack 4 and 3 that couldn't.
What it's the reason?
C:\tmp\john179j5\run>john --show shadow.txt
root:password:12923:0:99999:7:::
student1:...
- 51
3
votes
1
answer
8k
views
John The Ripper - find password when you know a part of it
I left my old job a few years back and wanted to check a few of my old pdf payslips but for the life of me I can't remember the password.
I've tried using John The Ripper in incremental mode because I ...
- 133
3
votes
1
answer
4k
views
How do I select the correct hash value / Why is my hash so extremely long?
I have used zip2john to get the hash for a zip file like that:
zip2john.exe myfile.zip > hash.txt
john told me:
ver 2.0 myfile.zip/SomeDir/SomeFile.itv PKZIP Encr: cmplen=11813, decmplen=20364, ...
- 141
3
votes
1
answer
3k
views
Pointers for john the ripper rulesets
I've been pouring over the JtR ruleset documentation and making little progress. I understand how to use it to make various permutations from a given wordlist, that's fine. However, I'm trying to ...
- 133
3
votes
3
answers
20k
views
what order does the incremental mode of john the ripper, brute force passwords in?
I am practicing reversing md5 hashed passwords using John the Riper and was curious about some behaviour. I added the md5 hash of zaa to the top of the file with the hashes and when I ran john ...
- 10.1k
3
votes
1
answer
2k
views
How is it that tools like Hashcat, JTR able to bruteforce an NTLMv2 hashes?
With regards to the following question about the feasibility of (brute|dictionary|rainbowtable)-forcing an NTLMv2 hash:
How feasible is it for an attacker to brute-force an NTLMv2 response captured ...
- 113
3
votes
2
answers
1k
views
John the ripper - creating specific rules
We have a situation where I am not finding any documentation on it. We are trying to scale across multiple machines/job by breaking up the keyspace by complexity. Its a 7 char completely random ...
- 31
2
votes
2
answers
2k
views
dictionary attack hashing algorithm
Does the kind of algorithm used to hash passwords have any advantages or disadvantages in a dictionary attack? i.e. SHA256, MD5, etc. or is it just the dictionary that is used by the attacker matters? ...
- 21
2
votes
4
answers
62k
views
John the Ripper - Can't get cracked MD5 hash to show
I'm trying to crack some MD5 hashes given in OWASP's BWA on their DVWA site. I was able to use John the Ripper and the very first time it worked fine and it showed the reversed hashes using the code:
...
- 39
2
votes
1
answer
9k
views
Generate a wordlist using John the Ripper
I want to generate wordlist with these rules: 8 characters, at least one uppercase letter, at least one lowercase letter, exactly two numbers. I've done a lot of google searching, and can't seem to ...
- 21
2
votes
1
answer
159
views
John the Ripper - Zip Password help - Latter half digit command advice
I'm trying to use John to recover some old ZIP files with a password I remember half. One half being a word, the latter half being a mix of four to six digits.
I remember the word, but not the digits ...
- 21
2
votes
1
answer
15k
views
John the ripper not displaying cracked password [closed]
When using john to crack Windows LM hashes it says it has cracked the passwords but does not display anything. See image below.
https://i.stack.imgur.com/k8fGC.jpg
2
votes
1
answer
4k
views
Unable to get John the Ripper to crack PDF password
I am new to Kali Linux and JTR but am playing around trying to crack a PDF file. I set the PDF Password to test so it's a known password on my own file. For whatever reason JTR appears to finish ...
- 121
2
votes
1
answer
3k
views
kali linux encrypting passwords with yescrypt - how to change?
I'm using John The Ripper for password cracking and adding new users/passwords to test it out. When I create a new user and password, the hash starts with $y$ which is from yescrypt. When testing a ...
2
votes
1
answer
8k
views
John The Ripper Error: No password hashes loaded when cracking a zip file in kali linux
I was practicing bruteforce attacks using John The Ripper. I want to crack a zip file. I obtained the hash and stored it in a zip file but when I attempt to crack the zip file it is giving me an error ...
2
votes
1
answer
3k
views
Crack windows excel password
I have many password protected microsoft excel worksheet and I need to be able to edit it. I have forgotten the password, and I know that I can edit the file and take out the password check, but I ...
- 21
2
votes
1
answer
171
views
Get total, not unique, number of cracked passwords from John the Rippers output?
I am giving John the Ripper a file that may contain duplicate hashes, and get output like this:
2g 0:00:00:01 1.600g/s 3.200p/s 3.200c/s 70227C/s 123456789..abc123
Which represents the total number ...
- 41
2
votes
1
answer
435
views
Cracking password with static prefix and suffix
I found a pattern password generation that works like that:
sha1("very long static prefix text blablabla "+password+" very long static suffix text");
I tried hashcat combined ...
- 21
2
votes
1
answer
8k
views
Decrypting a password-protected 7z file with Delta filter fails
I have made a 7z archive using Delta filter containing a wav file and I have protected it with a password. I am running a terminal in Kali Linux. My problem is that I cannot get the password cracked ...
- 21
2
votes
1
answer
10k
views
John the Ripper Brute Force not working (Windows Hash)
I'm pentesting for a class in Kali Linux, cracking a Windows 7 password. I mounted the windows' hard drive in Kali, ran PWDUMP7 and got the hashes saved on the desktop. It's only showing some of the ...
- 123
2
votes
0
answers
2k
views
John The Ripper: "No such file or directory" [closed]
I am using John the Ripper jumbo release on Windows:
1.9.0-jumbo-1 64-bit Windows binaries
I am told that there MIGHT be 2 different passwords in the zip file.
To avoid problems, I should pick only 1 ...
- 141
2
votes
1
answer
1k
views
John the Ripper: Output meaning - wordlist mode
Does the result output line of john the ripper show all the words tried?
E.g. does this line
0g 0:00:00:08 DONE (2022-03-11 06:00) 0g/s 1665Kp/s 1665Kc/s 1665KC/s 99CS .. 9999
mean that john tried all ...
- 121
2
votes
0
answers
212
views
Why is John returning gibberish for cracked hashes [closed]
I've been messing around with John, and when I attempt to crack an SSH hash, I receive this output.
Any clue why the cracked hash is displaying the gibberish??
I used ssh2john to convert the key to a ...
- 21
2
votes
1
answer
447
views
Opening password file with John The Ripper
I have an old Windows domain SMB sniffer file circa 1998 and just out of interest I want to see if I can crack it now with John The Ripper. I believe the file was generated using the L0phtCrack SMB ...
- 21
2
votes
0
answers
19k
views
Can anyone identify the $y$ hash prefix or identify what hash this could be? [closed]
I'm using Kali Linux and trying to crack my own /etc/passwd file with the username "matt". I've unshadowed it however trying to use Hashcat or JohnTheRipper to identify and crack it has ...
- 21
2
votes
0
answers
849
views
Decrypting xls file using John The Ripper
I need to open an excel file and see its contents which is locked with password. As I made some research on the internet, I have found that only way was a brute force attack. So I used John the Ripper ...
- 31
2
votes
0
answers
2k
views
Brute force hex password with exactly two special characters using JohnTheRipper
I want to optimize the way I'm using John the Ripper. I have a password with a know length (9) that consists only of (lower-case) hex characters and exactly two special characters.
First I tried ...
- 121
2
votes
0
answers
7k
views
John the Ripper doesn't use my wordlist file properly
When I use JtR to crack an encrypted zip file I have, it seems like JtR doesn't go through the wordlist I have ... I do the following steps:
$ brew install john-jumbo
$ export PATH=$PATH:/usr/local/...
- 153
2
votes
1
answer
39k
views
John the Ripper keep throwing errors
The error I'm getting is this:
Using default input encoding: UTF-8
No password hashes loaded (see FAQ)
I'm not sure if there's something wrong with using this directory. Must I use a different user ...
- 23
1
vote
1
answer
2k
views
John the Ripper method takes so much time to crack the hashcat file
Does John the Ripper method take so much time to crack the password? It's been 3 hours since the process started. No output yet and my PC specs are lower than you think.
Hashcat:
Airtel-My WIFI-BMF422-...
- 11
1
vote
2
answers
6k
views
How to crack forgotton KeePass password when knowing most of the password
A few days ago I changed my KeePass password and forgot it unfortunately. It isn't that much different from the previous one, but I kept trying and trying and it says it's incorrect
I found https://...
- 11
1
vote
1
answer
5k
views
John the ripper multiple mask attack
I am going to use John the Ripper on a multi-core server to crack about 400 Windows NT hashes. Depending on my CPU capacities I want to check all passwords that satisfy following masks:
?1?1?1?1?1?1?...
- 67
1
vote
2
answers
2k
views
What is the plaintext password of 'hash part 1' in the shadow file?
In Immersive Labs lab "Password Hashes II"
What is the plaintext password of 'hash part 1' in the shadow file?
shadow.txt contains:
part1:$6$WJ9Y7LHr$S3SdnPsXhCzHetPz0CL6TL7gZdeVK/...
- 21
1
vote
1
answer
11k
views
Cant crack Responder hashes with John or Hashcat
I ran Responder in a test network and obtained hashes from a Windows machine. The logs for the machine show something like this (some bytes changed for security reasons) and are stored in a file ...
- 277
1
vote
2
answers
1k
views
John The Ripper unable to crack long PDF passwords
Steps I follow:
I protected a PDF with a long password (I am trying with 38 characters password).
I created a dictionary that contains the password to crack the PDF with John the Ripper.
I run john --...
- 11
1
vote
1
answer
193
views
john the ripper tool - how to combine wordlist with incremental modes?
In hashcat, when we need to crack password based on wordlist, but additionally want to try partly bruteforce random ASCII characters in the end of any entry from the wordlist, we can use the following ...
- 13
1
vote
1
answer
831
views
How to apply custom filters for John The Ripper when cracking RAR3 archive password?
My problem is that I'm trying to crack RAR file with is encrypted with RAR3 encryption.
Decided to try with John The Ripper.
Here are clues I have from my friend.
Max password length is 8
Only ...
- 113