Questions tagged [john-the-ripper]

John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus lots of other hashes and ciphers in the community-enhanced version ("jumbo"). []

Filter by
Sorted by
Tagged with
3 votes
1 answer

How is it that tools like Hashcat, JTR able to bruteforce an NTLMv2 hashes?

With regards to the following question about the feasibility of (brute|dictionary|rainbowtable)-forcing an NTLMv2 hash: How feasible is it for an attacker to brute-force an NTLMv2 response captured ...
Vicer's user avatar
  • 113
7 votes
1 answer

Why won't pdf2john extract the password hash of this encrypted pdf? Getting blank results

New to the community, and to JtR and Hashcat as a whole, but after searching for a few days I couldn't find a solution to this specific problem. I have a password protected PDF file that I'm trying ...
Baljeet Appleseed's user avatar
2 votes
1 answer

Generate a wordlist using John the Ripper

I want to generate wordlist with these rules: 8 characters, at least one uppercase letter, at least one lowercase letter, exactly two numbers. I've done a lot of google searching, and can't seem to ...
john's user avatar
  • 21
2 votes
1 answer

Get total, not unique, number of cracked passwords from John the Rippers output?

I am giving John the Ripper a file that may contain duplicate hashes, and get output like this: 2g 0:00:00:01 1.600g/s 3.200p/s 3.200c/s 70227C/s 123456789..abc123 Which represents the total number ...
rkd's user avatar
  • 41
2 votes
1 answer

John the Ripper Brute Force not working (Windows Hash)

I'm pentesting for a class in Kali Linux, cracking a Windows 7 password. I mounted the windows' hard drive in Kali, ran PWDUMP7 and got the hashes saved on the desktop. It's only showing some of the ...
C-Love511's user avatar
  • 123
3 votes
2 answers

John the ripper - creating specific rules

We have a situation where I am not finding any documentation on it. We are trying to scale across multiple machines/job by breaking up the keyspace by complexity. Its a 7 char completely random ...
Ryan's user avatar
  • 31
1 vote
1 answer

John the ripper multiple mask attack

I am going to use John the Ripper on a multi-core server to crack about 400 Windows NT hashes. Depending on my CPU capacities I want to check all passwords that satisfy following masks: ?1?1?1?1?1?1?...
A J's user avatar
  • 67
0 votes
3 answers

Is there an easy way to record how long it takes John the Ripper to crack passwords?

We're doing a password audit by loading the password file into John and letting it run for a couple of days. One of the first questions I got in the remediation class was "How long did it take to ...
Eryn Kaeberle's user avatar
1 vote
1 answer

Cant crack Responder hashes with John or Hashcat

I ran Responder in a test network and obtained hashes from a Windows machine. The logs for the machine show something like this (some bytes changed for security reasons) and are stored in a file ...
Lucas Cioffi's user avatar
0 votes
1 answer

John the Ripper Character Lists

How is it possible to use or prioritize umlauted characters - ä ö ü ß Ä Ö Ü - whilst brute forcing. I'm not using any wordlist, only dozens of CPU threads via the following command : ./john --fork=...
Parsa Samet's user avatar
2 votes
0 answers

John the Ripper doesn't use my wordlist file properly

When I use JtR to crack an encrypted zip file I have, it seems like JtR doesn't go through the wordlist I have ... I do the following steps: $ brew install john-jumbo $ export PATH=$PATH:/usr/local/...
securecurve's user avatar
2 votes
1 answer

John the ripper not displaying cracked password [closed]

When using john to crack Windows LM hashes it says it has cracked the passwords but does not display anything. See image below.
John Rutherford's user avatar
2 votes
4 answers

John the Ripper - Can't get cracked MD5 hash to show

I'm trying to crack some MD5 hashes given in OWASP's BWA on their DVWA site. I was able to use John the Ripper and the very first time it worked fine and it showed the reversed hashes using the code: ...
therealtpain's user avatar
2 votes
1 answer

John the Ripper keep throwing errors

The error I'm getting is this: Using default input encoding: UTF-8 No password hashes loaded (see FAQ) I'm not sure if there's something wrong with using this directory. Must I use a different user ...
Progfram's user avatar
5 votes
2 answers

Generate John the Ripper rule

This question asks for pointers about generating JtR rulesets, but the OP states I understand how to use it to make various permutations from a given wordlist Could someone please explain that? ...
serv-inc's user avatar
  • 471
11 votes
1 answer

show previously hacked passwords with John The Ripper

I tried to crack my windows passwords on the SAM file with john the ripper, it worked just fine, and it shows me the password. But when i try to hack the same file again, john just tells me : Loaded ...
Sidahmed's user avatar
  • 679
3 votes
3 answers

what order does the incremental mode of john the ripper, brute force passwords in?

I am practicing reversing md5 hashed passwords using John the Riper and was curious about some behaviour. I added the md5 hash of zaa to the top of the file with the hashes and when I ran john ...
Celeritas's user avatar
  • 10.1k
1 vote
0 answers

John the Ripper performance

I have two questions regarding performance of John the Ripper. Within the format files, there is a variable named MIN_KEYS_PER_CRYPT and MAX_KEYS_PER_CRYPT. How much do they influence the performance....
Thanathan's user avatar
  • 782
8 votes
2 answers

How to crack `salt + SHA256(salt + password)` hashes with JTR?

I have a set of password hashes. Here is an example: 9e74437e97ff201ff38416138a22a7f3adfa3b9c10e947481bd94b16eed7df6b6e2806 From the source code of the application generating this hash I learned that ...
golem's user avatar
  • 973
6 votes
3 answers

Brute force alphanumeric password using JohnTheRipper

I recently recovered a zip archive with some files I need access to, but I can't remember the password. All I can remember is that the password was short (around 3-4 characters), and contained only ...
andrepd's user avatar
  • 171
5 votes
1 answer

John the ripper passwd file format with salt not working

I'm trying test password strength in one of our e-commerce sites. I'm using john the ripper to brute-force a password file. The algorithm used by PHP is: $hash = md5($salt . $pass) No other ...
user2253620's user avatar
3 votes
1 answer

Pointers for john the ripper rulesets

I've been pouring over the JtR ruleset documentation and making little progress. I understand how to use it to make various permutations from a given wordlist, that's fine. However, I'm trying to ...
EricR's user avatar
  • 133

1 2