Password Cracking - John the Ripper

John the Ripper is an Open Source password security auditing and password recovery tool available for many operating systems.

Download & Verify

Verify the download using the GnuPG Keys at https://www.openwall.com/signatures/

Info

This is already packaged in Kali Linux

Utilize Hash Identification to identify the hash format.

john --list=formats | grep -iF '<PossibleFormat>'

With the <Format> identified, crack using:

john --wordlist=/usr/share/wordlist/rockyou.txt --format=<Format> <FullFilePath>

We are able to create Custom Rules for John the Ripper to utilize to account for password complexity requirements.

The Custom Rules will typically be written based on the information about the target.