John the Ripper (JtR) is a powerful password cracking tool included in Kali Linux.
Below is a step-by-
step guide on how to use it.
Step 1: Install John the Ripper (If not installed)
John the Ripper is pre-installed in Kali Linux, but you can update or reinstall it using:
sudo apt update && sudo apt install john -y
Step 2: Check Installed Version
Verify installation by checking the version:
john --version
Step 3: Understanding Basic Syntax
The basic syntax of John the Ripper:
john [options] [password file]
Common options:
• --wordlist=<file> → Use a wordlist for dictionary attack
• --format=<type> → Specify hash type (e.g., MD5, SHA1)
• --show → Display cracked passwords
• --incremental → Perform brute-force attack
Step 4: Create or Get a Password Hash
If you don’t have a password hash, generate one using OpenSSL:
echo -n "password123" | openssl passwd -6 -stdin
This will generate a SHA512 hash.
Example output:
$6$randomsalt$Uqxy1Qw9Fg5Sm1oex7dpbGLT9tPzVJ.e9BgFhVp7bFHzqxG8MSwJbV9UeyfVxOlX7K
oAftVShxxw1LPHQZo/
Save this in a file (e.g., [Link]).
Step 5: Crack the Hash Using Different Methods
1. Dictionary Attack
Use a predefined wordlist (e.g., [Link]):
john --wordlist=/usr/share/wordlists/[Link] [Link]
2. Brute-Force Attack
Use the default incremental mode:
john --incremental [Link]
3. Cracking a Shadow File (Root Privileges Required)
If you have access to /etc/shadow, extract password hashes:
sudo unshadow /etc/passwd /etc/shadow > cracked_hashes.txt
john cracked_hashes.txt
Step 6: Display Cracked Passwords
To see cracked passwords:
john --show [Link]
Step 7: Stop and Resume Cracking
To pause John the Ripper:
pkill -STOP john
To resume:
pkill -CONT john
To restore a session:
john --restore
Step 8: Custom Rules and Advanced Cracking
Modify John’s configuration file ([Link]) to define custom rules.
Example:
john --rules --wordlist=custom_list.txt [Link]
Extra Commands
• List all supported hash formats:
• john --list=formats
• Get help with commands:
• john --help