Questions tagged [john-the-ripper]
John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus lots of other hashes and ciphers in the community-enhanced version ("jumbo"). [openwall.com]
122
questions
3
votes
1
answer
2k
views
How is it that tools like Hashcat, JTR able to bruteforce an NTLMv2 hashes?
With regards to the following question about the feasibility of (brute|dictionary|rainbowtable)-forcing an NTLMv2 hash:
How feasible is it for an attacker to brute-force an NTLMv2 response captured ...
- 113
7
votes
1
answer
7k
views
Why won't pdf2john extract the password hash of this encrypted pdf? Getting blank results
New to the community, and to JtR and Hashcat as a whole, but after searching for a few days I couldn't find a solution to this specific problem.
I have a password protected PDF file that I'm trying ...
2
votes
1
answer
9k
views
Generate a wordlist using John the Ripper
I want to generate wordlist with these rules: 8 characters, at least one uppercase letter, at least one lowercase letter, exactly two numbers. I've done a lot of google searching, and can't seem to ...
- 21
2
votes
1
answer
171
views
Get total, not unique, number of cracked passwords from John the Rippers output?
I am giving John the Ripper a file that may contain duplicate hashes, and get output like this:
2g 0:00:00:01 1.600g/s 3.200p/s 3.200c/s 70227C/s 123456789..abc123
Which represents the total number ...
- 41
2
votes
1
answer
10k
views
John the Ripper Brute Force not working (Windows Hash)
I'm pentesting for a class in Kali Linux, cracking a Windows 7 password. I mounted the windows' hard drive in Kali, ran PWDUMP7 and got the hashes saved on the desktop. It's only showing some of the ...
- 123
3
votes
2
answers
1k
views
John the ripper - creating specific rules
We have a situation where I am not finding any documentation on it. We are trying to scale across multiple machines/job by breaking up the keyspace by complexity. Its a 7 char completely random ...
- 31
1
vote
1
answer
5k
views
John the ripper multiple mask attack
I am going to use John the Ripper on a multi-core server to crack about 400 Windows NT hashes. Depending on my CPU capacities I want to check all passwords that satisfy following masks:
?1?1?1?1?1?1?...
- 67
0
votes
3
answers
1k
views
Is there an easy way to record how long it takes John the Ripper to crack passwords?
We're doing a password audit by loading the password file into John and letting it run for a couple of days.
One of the first questions I got in the remediation class was "How long did it take to ...
1
vote
1
answer
11k
views
Cant crack Responder hashes with John or Hashcat
I ran Responder in a test network and obtained hashes from a Windows machine. The logs for the machine show something like this (some bytes changed for security reasons) and are stored in a file ...
- 277
0
votes
1
answer
7k
views
John the Ripper Character Lists
How is it possible to use or prioritize umlauted characters - ä ö ü ß Ä Ö Ü - whilst brute forcing.
I'm not using any wordlist, only dozens of CPU threads via the following command :
./john --fork=...
- 246
2
votes
0
answers
7k
views
John the Ripper doesn't use my wordlist file properly
When I use JtR to crack an encrypted zip file I have, it seems like JtR doesn't go through the wordlist I have ... I do the following steps:
$ brew install john-jumbo
$ export PATH=$PATH:/usr/local/...
- 153
2
votes
1
answer
15k
views
John the ripper not displaying cracked password [closed]
When using john to crack Windows LM hashes it says it has cracked the passwords but does not display anything. See image below.
https://i.stack.imgur.com/k8fGC.jpg
2
votes
4
answers
62k
views
John the Ripper - Can't get cracked MD5 hash to show
I'm trying to crack some MD5 hashes given in OWASP's BWA on their DVWA site. I was able to use John the Ripper and the very first time it worked fine and it showed the reversed hashes using the code:
...
- 39
2
votes
1
answer
39k
views
John the Ripper keep throwing errors
The error I'm getting is this:
Using default input encoding: UTF-8
No password hashes loaded (see FAQ)
I'm not sure if there's something wrong with using this directory. Must I use a different user ...
- 23
5
votes
2
answers
26k
views
Generate John the Ripper rule
This question asks for pointers about generating JtR rulesets, but the OP states
I understand how to use it to make various permutations from a given wordlist
Could someone please explain that? ...
- 471
11
votes
1
answer
85k
views
show previously hacked passwords with John The Ripper
I tried to crack my windows passwords on the SAM file with john the ripper, it worked just fine, and it shows me the password. But when i try to hack the same file again, john just tells me :
Loaded ...
- 679
3
votes
3
answers
20k
views
what order does the incremental mode of john the ripper, brute force passwords in?
I am practicing reversing md5 hashed passwords using John the Riper and was curious about some behaviour. I added the md5 hash of zaa to the top of the file with the hashes and when I ran john ...
- 10.1k
1
vote
0
answers
641
views
John the Ripper performance
I have two questions regarding performance of John the Ripper.
Within the format files, there is a variable named MIN_KEYS_PER_CRYPT and MAX_KEYS_PER_CRYPT. How much do they influence the performance....
- 782
8
votes
2
answers
54k
views
How to crack `salt + SHA256(salt + password)` hashes with JTR?
I have a set of password hashes.
Here is an example:
9e74437e97ff201ff38416138a22a7f3adfa3b9c10e947481bd94b16eed7df6b6e2806
From the source code of the application generating this hash I learned that ...
- 973
6
votes
3
answers
30k
views
Brute force alphanumeric password using JohnTheRipper
I recently recovered a zip archive with some files I need access to, but I can't remember the password. All I can remember is that the password was short (around 3-4 characters), and contained only ...
- 171
5
votes
1
answer
21k
views
John the ripper passwd file format with salt not working
I'm trying test password strength in one of our e-commerce sites. I'm using john the ripper to brute-force a password file. The algorithm used by PHP is:
$hash = md5($salt . $pass)
No other ...
- 61
3
votes
1
answer
3k
views
Pointers for john the ripper rulesets
I've been pouring over the JtR ruleset documentation and making little progress. I understand how to use it to make various permutations from a given wordlist, that's fine. However, I'm trying to ...
- 133