John the Ripper

• Description: used to crack password hashes, including passwords from the passwd and shadow files in Linux

• Installation: sudo apt-get install john

• Usage

  • Obtain Linux password hashes from shadow file: cat /etc/shadow

  • To combine passwd and shadow files: unshadow passwd shadow > HashFile

  • To run using HashFile as input and rockyou.txt as word list with both files in current directory: john HashFile --wordlist=rockyou.txt

• Resources

  • John the Ripper Usage Examples

  • John the Ripper Tutorial

  • Additional Downloads for different Operating Systems

  • Word Lists

  • Rock You Word List