John The Ripper Tool And Task
Task 4 Cracking Basic Hashes:
Download the task file, we have following 4 hashes:
2e728dd31fb5949bc39cac5a9f066498
1A732667F3917C0F4AA98BB13011B9090C6F8065
D7F4D3CCEE7ACD3DD7FAD3AC2BE2AAE9C44F4E9B7FB802D73136D4C53920140A
c5a60cc6bbba781c601c5402755ae1044bbf45b78d1183cbf2ca1c865b6c792cf3c6b8779134498
6c8a832a0f9ca8d0b4afd3d9421a149d57075e1b4e93f90bf
Q1 What type of hash is hash1.txt?
Install the hash analyse tool developed by Python3 named hash-id.py:
run the hash-id.py and enter the hash:
Q2 What is the cracked value of hash1.txt?
Q3 What type of hash is hash2.txt?
Q4 What is the cracked value of hash2.txt
Q5 What type of hash is hash3.txt?
Q6 What is the cracked value of hash3.txt
Q7 What type of hash is hash4.txt?
Q8 What is the cracked value of hash4.txt
Task 5 Cracking Windows Authentication Hashes
Download the task file, hash is 5460C85BD858A11475115D2DD3A82333
Q1 What do we need to set the “format” flag to, in order to crack this?
Ans : nt
Q2 What is the cracked value of this password?
Task 6 Cracking /etc/shadow Hashes
What is the root password?
print out the downloaded file:
the shadow and passwd content are in the txt folder
Read the root shadow, it starts with $6 indicates its an sha512crypt hash type.
EXTRA: crack the hash
Write the hash to the a1.txt file
Crack the code with john
Task 7 Single Crack Mode
Download the task file and edit it as required:
The Single Crack Mode syntax is similar to the basic syntax cracking hashes with wordlist:
Task 8 Custom Rules
What do custom rules allow us to exploit?
Password complexity predictability
What rule would we use to add all capital letters to the end of the word?
to the end: Az
All capital letters: “[A-Z]”
Rule example:
Az“[A-Z]”
What flag would we use to call a custom rule called “THMRules”
— rule=THMRules
Task 9 Cracking Password Protected Zip Files
Download the task file
crack the zip password:
command: zip2john
Using the John package command zip2john to crack secure.zip and output the content to file new.
Using the basic John syntax to crack the hash in new.
Task 10 Cracking Password Protected RAR Archives
Crack the protected file compressed in RAR type.
command: rar2john
The processes are similar to Task 9
Task 11 Cracking SSH Keys with John
Download the task file
The processes are similar to Task 9&10
John in another version: ssh2john
