John the Ripper
Cracks hashes and containers (zip, pfx, psafe...).
John the Ripper, an offline hash cracker. It auto-detects the format and attacks by wordlist, rules or brute force. Its *2john script ecosystem (zip2john, ssh2john, pfx2john, keepass2john...) turns almost any protected file into a crackable hash.
Family Cracking & wordlists
Flags --wordlist --format --show
Concepts Hash Cracking, Cracking /etc/shadow, Cracking protected files (.zip, .pfx, .kdbx)
Cheatsheet Hashes
Installation
sudo apt install -y johnUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- AccessProving Grounds Practice
- ActiveHackTheBox
- AdministratorHackTheBox
- AlertHackTheBox
- ApexProving Grounds Practice
- BuscaloveDockerLabs
- CertifiedHackTheBox
- ChemistryHackTheBox
- DockerlabsDockerLabs
- ExtplorerProving Grounds Practice
- ForestHackTheBox
- GreenHornHackTheBox
- HealHackTheBox
- HeistHackTheBox
- HokkaidoProving Grounds Practice
- Infovore 1VulnHub
- MailingHackTheBox
- MonitorsThreeHackTheBox
- NagoyaProving Grounds Practice
- NickelProving Grounds Practice
- NorCDockerLabs
- PotatoProving Grounds Play
- ScrutinyProving Grounds Practice
- SeaHackTheBox
- ShoppyHackTheBox
- SightlessHackTheBox
- SPXProving Grounds Practice
- Symfonos 1 & 2VulnHub
- TimelapseHackTheBox
- UnderPassHackTheBox
- VaultProving Grounds Practice
- Vulnerable Lab (1 · 4 · 5)VulnHub
- WallpaperHubProving Grounds Practice
- WorkaholicProving Grounds Practice
- ZabProving Grounds Practice