John the Ripper
Crackeo de hashes y de contenedores (zip, pfx, psafe...).
John the Ripper, crackeador de hashes offline. Autodetecta el formato y ataca por diccionario, reglas o fuerza bruta. Su ecosistema de scripts *2john (zip2john, ssh2john, pfx2john, keepass2john...) convierte casi cualquier fichero protegido en un hash crackeable.
Familia Cracking y diccionarios
Flags --wordlist --format --show
Conceptos Hash Cracking, Cracking /etc/shadow, Cracking protected files (.zip, .pfx, .kdbx)
Cheatsheet Hashes
Instalación
sudo apt install -y johnComandos útiles
Aparece en
Algunas máquinas donde se documenta su uso; no es una lista exhaustiva.
- AccessProving Grounds Practice
- ActiveHackTheBox
- AdministratorHackTheBox
- AlertHackTheBox
- ApexProving Grounds Practice
- BuscaloveDockerLabs
- CertifiedHackTheBox
- ChemistryHackTheBox
- DockerlabsDockerLabs
- ExtplorerProving Grounds Practice
- ForestHackTheBox
- GreenHornHackTheBox
- HealHackTheBox
- HeistHackTheBox
- HokkaidoProving Grounds Practice
- Infovore 1VulnHub
- MailingHackTheBox
- MonitorsThreeHackTheBox
- NagoyaProving Grounds Practice
- NickelProving Grounds Practice
- NorCDockerLabs
- PotatoProving Grounds Play
- ScrutinyProving Grounds Practice
- SeaHackTheBox
- ShoppyHackTheBox
- SightlessHackTheBox
- SPXProving Grounds Practice
- Symfonos 1 & 2VulnHub
- TimelapseHackTheBox
- UnderPassHackTheBox
- VaultProving Grounds Practice
- Vulnerable Lab (1 · 4 · 5)VulnHub
- WallpaperHubProving Grounds Practice
- WorkaholicProving Grounds Practice
- ZabProving Grounds Practice