Search everything
26 results for «john»
Tools 1
Techniques 1
MITRE ATT&CK techniques 2
Guides 3
- Hash cracking with hashcat and John the Ripper: modes, rules, masks and protected files Identify a hash, pick the right hashcat mode (NTLM, NetNTLMv2, bcrypt, Kerberos), use rules and masks, and crack zip, KeePass and SSH keys with *2john.
- Kerberoasting and AS-REP Roasting: crackable hashes from Active Directory What makes an account vulnerable, how to request the tickets with Impacket, NetExec or Rubeus, how to crack them with hashcat, and the usual errors (clock, etype, usernames).
- JWT attacks: alg none, weak secrets, algorithm confusion and kid injection How to read a JSON Web Token, crack its secret with hashcat, abuse alg none and RS256 to HS256 confusion, and inject into the kid and jku headers to sign your own tokens.
Resources and tools 1
Learning paths 2
- Zero to OSCP Six stages in order, from your first nmap to a mock exam: Hack The Box machines, guides and cheat sheets to prepare for the OSCP without getting lost.
- Active Directory red teaming From enumerating a domain to ADCS, delegation, relay, C2 and evasion: Windows Hack The Box machines ordered by technique, with their cheat sheets.
Guide sections 8
- 5. Protected files: the *2john tools Hash cracking with hashcat and John the Ripper: modes, rules, masks and protected files
- What next Hash cracking with hashcat and John the Ripper: modes, rules, masks and protected files
- Common errors Hash cracking with hashcat and John the Ripper: modes, rules, masks and protected files
- 6. Performance Hash cracking with hashcat and John the Ripper: modes, rules, masks and protected files
- 1. Identify the hash Hash cracking with hashcat and John the Ripper: modes, rules, masks and protected files
- 2. Dictionary attack Hash cracking with hashcat and John the Ripper: modes, rules, masks and protected files
- 4. Masks: when you know the pattern Hash cracking with hashcat and John the Ripper: modes, rules, masks and protected files
- 3. Rules: when rockyou is not enough Hash cracking with hashcat and John the Ripper: modes, rules, masks and protected files
Commands 8
-
John the Ripper
JWT analyser › Attacks › Crack the secret (HS256)
john --format=HMAC-SHA256 --wordlist=/usr/share/wordlists/rockyou.txt jwt.txt -
Wordlist
Hash identifier › Cracking › John the Ripper
john --wordlist=/usr/share/wordlists/rockyou.txt hash.txt -
Show results
Hash identifier › Cracking › John the Ripper
john --show hash.txt -
Force the format
John the Ripper › More formats
john --format=raw-md5 --wordlist=/usr/share/wordlists/rockyou.txt hash.txt -
Look up a format name
John the Ripper › More formats
john --list=formats | tr "," "\n" | grep -i krb -
Merge passwd and shadow
Hash identifier › Cracking › John the Ripper
unshadow passwd shadow > hashes.txt -
Extract hashes from files
Hash identifier › Cracking › John the Ripper
zip2john backup.zip > hash.txt ssh2john id_rsa > hash.txt keepass2john Database.kdbx > hash.txt office2john informe.docx > hash.txt pdf2john documento.pdf > hash.txt -
.pfx certificate, PDF, Office and GPG
John the Ripper › More formats
pfx2john cert.pfx > hash.txt pdf2john doc.pdf > hash.txt office2john doc.docx > hash.txt gpg2john clave.asc > hash.txt