CtrlK

Pentest Notes / Exploitation / Password Cracking

JohnTheRipper

Basic Syntax

john --format=[format] --wordlist=[path to wordlist] [path to file]
This is if the file is not converted to hash beforehand

List formats

john --list=formats
john --list=formats | grep -iF "format"

/etc/shadow hashes

unshadow local_passwd local_shadow > unshadowed.txt
john --wordlist=/usr/share/wordlists/rockyou.txt --format=sha512crypt unshadowed.txt

**Note: **No need of format for the following as it is already a hash that john can understand.

SSH private keys

ssh2john [id_rsa private key file] > [output file]
john --wordlist=[path to wordlist] [output file]

Zip files

zip2john [options] [zip file] > [output file]
john --wordlist=[path to wordlist] [output file]

Rar files

rar2john [rar file] > [output file]
john --wordlist=[path to wordlist] [output file]