Skip to main content

Questions tagged [john-the-ripper]

John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus lots of other hashes and ciphers in the community-enhanced version ("jumbo"). [openwall.com]

Filter by
Sorted by
Tagged with
16 votes
1 answer
8k views

John the ripper password cracked or not?

I have the shadow file from an embedded device running linux. Trying to use John to crack it. There is only the 'root' hash in the shadow file. 12 seconds in, John finds the password for 'root', but ...
zoulzubazz's user avatar
11 votes
1 answer
95k views

show previously hacked passwords with John The Ripper

I tried to crack my windows passwords on the SAM file with john the ripper, it worked just fine, and it shows me the password. But when i try to hack the same file again, john just tells me : Loaded ...
Sidahmed's user avatar
  • 679
10 votes
1 answer
103k views

Use John the Ripper to break Password Protected Zip

I installed kali linux, that comes with John the ripper. I have a password-protected zip file. I'm pretty sure the password is complex. I first convert the zip into a hash: sudo zip2john FILE_LOCATION ...
Tarun Ravi's user avatar
8 votes
2 answers
58k views

How to crack `salt + SHA256(salt + password)` hashes with JTR?

I have a set of password hashes. Here is an example: 9e74437e97ff201ff38416138a22a7f3adfa3b9c10e947481bd94b16eed7df6b6e2806 From the source code of the application generating this hash I learned that ...
golem's user avatar
  • 1,003
7 votes
1 answer
8k views

Why won't pdf2john extract the password hash of this encrypted pdf? Getting blank results

New to the community, and to JtR and Hashcat as a whole, but after searching for a few days I couldn't find a solution to this specific problem. I have a password protected PDF file that I'm trying ...
Baljeet Appleseed's user avatar
6 votes
3 answers
18k views

Does john the ripper not support yescrypt?

I'm learning about password attacks using john and am trying to use it for bruteforcing my shaddow file. I created a user called newuser with password stuff and then used sudo unshadow /etc/passwd /...
Teererai Marange's user avatar
6 votes
3 answers
31k views

Is it possible to crack any SHA1 hashed password

I'm trying to understand how easy it is to crack a SHA1 hashed password. I have a training database giving hundreds of password hashed. I have tried to use some online tools to crack them and I have ...
KB303's user avatar
  • 433
6 votes
3 answers
32k views

Brute force alphanumeric password using JohnTheRipper

I recently recovered a zip archive with some files I need access to, but I can't remember the password. All I can remember is that the password was short (around 3-4 characters), and contained only ...
andrepd's user avatar
  • 171
6 votes
1 answer
8k views

For bcrypt why is JTR so much faster than hashcat?

To keep it short I've recently been learning about hashing and password hash cracking on TryHackMe. I was tasked to crack the following hash: $2y$10$0veO/JSFh4389Lluc4Xya.dfy2MF.bZhz0jVMw.V....
JuniorPen's user avatar
5 votes
2 answers
27k views

Generate John the Ripper rule

This question asks for pointers about generating JtR rulesets, but the OP states I understand how to use it to make various permutations from a given wordlist Could someone please explain that? ...
serv-inc's user avatar
  • 471
5 votes
4 answers
48k views

How do I crack an id_rsa encrypted private key with john the ripper?

I am trying to crack a password protected id_rsa, with john the ripper. But it doesn't find the correct password for some reason. I have create a new user and generated a new id_rsa with ssh-keygen (...
Olivier Lasne's user avatar
5 votes
1 answer
22k views

John the ripper passwd file format with salt not working

I'm trying test password strength in one of our e-commerce sites. I'm using john the ripper to brute-force a password file. The algorithm used by PHP is: $hash = md5($salt . $pass) No other ...
user2253620's user avatar
4 votes
1 answer
37k views

"john --format=md5" caused "Unknown ciphertext format name requested" error

This is known md5 hash for Kioptrix: Level 1.1 (#2) Linux unshadow file wolf@linux:~$ cat md5hash.txt root:$1$FTpMLT88$VdzDQTTcksukSKMLRSVlc.:0:0:root:/root:/bin/bash john:$1$wk7kHI5I$...
Wolf's user avatar
  • 367
3 votes
2 answers
3k views

John the Riper couldn't crack all the passwoords

I have a password file with 7 passwords, but JTR only could crack 4 and 3 that couldn't. What it's the reason? C:\tmp\john179j5\run>john --show shadow.txt root:password:12923:0:99999:7::: student1:...
John's user avatar
  • 51
3 votes
1 answer
10k views

John The Ripper - find password when you know a part of it

I left my old job a few years back and wanted to check a few of my old pdf payslips but for the life of me I can't remember the password. I've tried using John The Ripper in incremental mode because I ...
Will's user avatar
  • 133
3 votes
1 answer
6k views

How do I select the correct hash value / Why is my hash so extremely long?

I have used zip2john to get the hash for a zip file like that: zip2john.exe myfile.zip > hash.txt john told me: ver 2.0 myfile.zip/SomeDir/SomeFile.itv PKZIP Encr: cmplen=11813, decmplen=20364, ...
tmighty's user avatar
  • 141
3 votes
1 answer
3k views

Pointers for john the ripper rulesets

I've been pouring over the JtR ruleset documentation and making little progress. I understand how to use it to make various permutations from a given wordlist, that's fine. However, I'm trying to ...
EricR's user avatar
  • 133
3 votes
3 answers
22k views

what order does the incremental mode of john the ripper, brute force passwords in?

I am practicing reversing md5 hashed passwords using John the Riper and was curious about some behaviour. I added the md5 hash of zaa to the top of the file with the hashes and when I ran john ...
Celeritas's user avatar
  • 10.2k
3 votes
1 answer
3k views

How is it that tools like Hashcat, JTR able to bruteforce an NTLMv2 hashes?

With regards to the following question about the feasibility of (brute|dictionary|rainbowtable)-forcing an NTLMv2 hash: How feasible is it for an attacker to brute-force an NTLMv2 response captured ...
Vicer's user avatar
  • 113
3 votes
2 answers
1k views

John the ripper - creating specific rules

We have a situation where I am not finding any documentation on it. We are trying to scale across multiple machines/job by breaking up the keyspace by complexity. Its a 7 char completely random ...
Ryan's user avatar
  • 31
3 votes
0 answers
1k views

Decrypting xls file using John The Ripper

I need to open an excel file and see its contents which is locked with password. As I made some research on the internet, I have found that only way was a brute force attack. So I used John the Ripper ...
KontrCode's user avatar
2 votes
2 answers
2k views

dictionary attack hashing algorithm

Does the kind of algorithm used to hash passwords have any advantages or disadvantages in a dictionary attack? i.e. SHA256, MD5, etc. or is it just the dictionary that is used by the attacker matters? ...
gg0092's user avatar
  • 21
2 votes
4 answers
68k views

John the Ripper - Can't get cracked MD5 hash to show

I'm trying to crack some MD5 hashes given in OWASP's BWA on their DVWA site. I was able to use John the Ripper and the very first time it worked fine and it showed the reversed hashes using the code: ...
therealtpain's user avatar
2 votes
1 answer
10k views

Generate a wordlist using John the Ripper

I want to generate wordlist with these rules: 8 characters, at least one uppercase letter, at least one lowercase letter, exactly two numbers. I've done a lot of google searching, and can't seem to ...
john's user avatar
  • 21
2 votes
1 answer
282 views

John the Ripper - Zip Password help - Latter half digit command advice

I'm trying to use John to recover some old ZIP files with a password I remember half. One half being a word, the latter half being a mix of four to six digits. I remember the word, but not the digits ...
LEGEND-001's user avatar
2 votes
1 answer
6k views

John the ripper multiple mask attack

I am going to use John the Ripper on a multi-core server to crack about 400 Windows NT hashes. Depending on my CPU capacities I want to check all passwords that satisfy following masks: ?1?1?1?1?1?1?...
A J's user avatar
  • 77
2 votes
1 answer
15k views

John the ripper not displaying cracked password [closed]

When using john to crack Windows LM hashes it says it has cracked the passwords but does not display anything. See image below. https://i.sstatic.net/k8fGC.jpg
John Rutherford's user avatar
2 votes
1 answer
5k views

Unable to get John the Ripper to crack PDF password

I am new to Kali Linux and JTR but am playing around trying to crack a PDF file. I set the PDF Password to test so it's a known password on my own file. For whatever reason JTR appears to finish ...
Hooplator15's user avatar
2 votes
1 answer
5k views

kali linux encrypting passwords with yescrypt - how to change?

I'm using John The Ripper for password cracking and adding new users/passwords to test it out. When I create a new user and password, the hash starts with $y$ which is from yescrypt. When testing a ...
confusedPorcupine's user avatar
2 votes
1 answer
9k views

John The Ripper Error: No password hashes loaded when cracking a zip file in kali linux

I was practicing bruteforce attacks using John The Ripper. I want to crack a zip file. I obtained the hash and stored it in a zip file but when I attempt to crack the zip file it is giving me an error ...
Noamaan Mulla's user avatar
2 votes
1 answer
473 views

John the Ripper / Hashcat rule, reject candidate if char at position X is the same as character at position Y

I'm using John to generate some wordlists and I'm trying to figure out the most optimized way to do the next step. What I want to do is add every possible 3 digit number to a set where the first digit ...
Dani's user avatar
  • 234
2 votes
1 answer
4k views

Crack windows excel password

I have many password protected microsoft excel worksheet and I need to be able to edit it. I have forgotten the password, and I know that I can edit the file and take out the password check, but I ...
Ethan's user avatar
  • 21
2 votes
1 answer
199 views

Get total, not unique, number of cracked passwords from John the Rippers output?

I am giving John the Ripper a file that may contain duplicate hashes, and get output like this: 2g 0:00:00:01 1.600g/s 3.200p/s 3.200c/s 70227C/s 123456789..abc123 Which represents the total number ...
rkd's user avatar
  • 41
2 votes
1 answer
627 views

Cracking password with static prefix and suffix

I found a pattern password generation that works like that: sha1("very long static prefix text blablabla "+password+" very long static suffix text"); I tried hashcat combined ...
Samuel Pires's user avatar
2 votes
1 answer
8k views

Decrypting a password-protected 7z file with Delta filter fails

I have made a 7z archive using Delta filter containing a wav file and I have protected it with a password. I am running a terminal in Kali Linux. My problem is that I cannot get the password cracked ...
juhohe's user avatar
  • 21
2 votes
1 answer
3k views

John the Ripper Custom Dynamic Hash Function Usage

I have created a custom dynamic hash function comprised of a series of different existing hash functions chained together. I'll spare you the exact details because it's for a class assignment. I've ...
Jack F.'s user avatar
  • 21
2 votes
1 answer
10k views

John the Ripper Brute Force not working (Windows Hash)

I'm pentesting for a class in Kali Linux, cracking a Windows 7 password. I mounted the windows' hard drive in Kali, ran PWDUMP7 and got the hashes saved on the desktop. It's only showing some of the ...
C-Love511's user avatar
  • 123
2 votes
0 answers
3k views

John The Ripper: "No such file or directory" [closed]

I am using John the Ripper jumbo release on Windows: 1.9.0-jumbo-1 64-bit Windows binaries I am told that there MIGHT be 2 different passwords in the zip file. To avoid problems, I should pick only 1 ...
tmighty's user avatar
  • 141
2 votes
1 answer
1k views

John the Ripper: Output meaning - wordlist mode

Does the result output line of john the ripper show all the words tried? E.g. does this line 0g 0:00:00:08 DONE (2022-03-11 06:00) 0g/s 1665Kp/s 1665Kc/s 1665KC/s 99CS .. 9999 mean that john tried all ...
Bat's user avatar
  • 121
2 votes
0 answers
257 views

Why is John returning gibberish for cracked hashes [closed]

I've been messing around with John, and when I attempt to crack an SSH hash, I receive this output. Any clue why the cracked hash is displaying the gibberish?? I used ssh2john to convert the key to a ...
Mackalacka's user avatar
2 votes
1 answer
541 views

Opening password file with John The Ripper

I have an old Windows domain SMB sniffer file circa 1998 and just out of interest I want to see if I can crack it now with John The Ripper. I believe the file was generated using the L0phtCrack SMB ...
user5820228's user avatar
2 votes
0 answers
23k views

Can anyone identify the $y$ hash prefix or identify what hash this could be? [closed]

I'm using Kali Linux and trying to crack my own /etc/passwd file with the username "matt". I've unshadowed it however trying to use Hashcat or JohnTheRipper to identify and crack it has ...
Valkyr's user avatar
  • 21
2 votes
0 answers
3k views

John the Ripper add special characters

I have been trying to do this for hours and can´t really figure this out. How can I pass only this range of signs to John the Ripper? ./john hashes --mask=Pepito[1234567890!"·$%&/()=|@#~€]--...
Roger's user avatar
  • 21
2 votes
0 answers
2k views

Brute force hex password with exactly two special characters using JohnTheRipper

I want to optimize the way I'm using John the Ripper. I have a password with a know length (9) that consists only of (lower-case) hex characters and exactly two special characters. First I tried ...
Norbert's user avatar
  • 121
2 votes
0 answers
7k views

John the Ripper doesn't use my wordlist file properly

When I use JtR to crack an encrypted zip file I have, it seems like JtR doesn't go through the wordlist I have ... I do the following steps: $ brew install john-jumbo $ export PATH=$PATH:/usr/local/...
securecurve's user avatar
2 votes
1 answer
42k views

John the Ripper keep throwing errors

The error I'm getting is this: Using default input encoding: UTF-8 No password hashes loaded (see FAQ) I'm not sure if there's something wrong with using this directory. Must I use a different user ...
Progfram's user avatar
1 vote
1 answer
2k views

John the Ripper method takes so much time to crack the hashcat file

Does John the Ripper method take so much time to crack the password? It's been 3 hours since the process started. No output yet and my PC specs are lower than you think. Hashcat: Airtel-My WIFI-BMF422-...
Abel jorlin's user avatar
1 vote
2 answers
6k views

How to crack forgotton KeePass password when knowing most of the password

A few days ago I changed my KeePass password and forgot it unfortunately. It isn't that much different from the previous one, but I kept trying and trying and it says it's incorrect I found https://...
forgotitffs's user avatar
1 vote
1 answer
2k views

What is the plaintext password of 'hash part 1' in the shadow file?

In Immersive Labs lab "Password Hashes II" What is the plaintext password of 'hash part 1' in the shadow file? shadow.txt contains: part1:$6$WJ9Y7LHr$S3SdnPsXhCzHetPz0CL6TL7gZdeVK/...
Data Flow's user avatar
1 vote
2 answers
1k views

Benchmark Password Cracking Tools

I want to perform a benchmark for the most popular offline password cracking tools (john the ripper and hashcat)? What metrics or approach should i take about benchmarking in order to determine what ...
Yousif Shibeika's user avatar