#johntheripper — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #johntheripper, aggregated by home.social.
-
Did you know, John the Ripper can use hashcat rules?
Unlike hashcat’s simple -r flag, JtR requires some manual setup in a conf file. @freeroute posted a step-by-step guide explaining how to do this.
https://forum.hashpwn.net/post/2718
#jtr #john #JohnTheRipper #hashcat #rules #hashcracking #infosec #howto #hashpwn
-
Trying to beat #johntheripper on scrypt :ablobcathappypaws:
Found a trick that got me 113c/s over 76c/s:ai_yay: -
After seeing yescrypt hashes appear in CMIYC a while back, I started developing a yescrypt cracker in pure Go. Since then, yescrypt has become the default /etc/shadow hash for many popular linux distros such as Debian, Ubuntu, RHEL, Fedora, and Arch (to name a few), but hash cracking support for this algo has been limited to JtR -- until now.
Here's a sneak peek of the yescrypt_cracker POC:
https://forum.hashpwn.net/post/446
#yescrypt #hashcracking #cyclone #hashpwn #hashcat #cmiyc #jtr #johntheripper #golang
-
1236 emails envoyés à autant d’utilisateurisses dont j’ai pu casser le mot de passe lors d’un audit.
Si tout se passe bien, demain j’aurais de la lecture. -
Currently 18 hours into a password file crack against one of my VMs, because WHAT WAS THAT ROOT PASSWORD I USED?
I don't care that I could have reset it within 5 minutes, *I must know*
-
I was wondering if there is already #GPU #accelerated #bruteforcers for hash-to-curve
https://datatracker.ietf.org/doc/rfc9380/ out there?
and going beyond just "simple" h2c, 2hashdh prf H(pwd, H2c(pwd)^k) seems to be popular, might as well also inquire about their support. #opaque is one case where this is being used.does anyone know?
-
@tychotithonus I hope you've used #JohnTheRipper or #Hashcat to generate all possible candidates ;)
-
John returns invalid UTF-8 and askes for HMAC-Sha256 and HMAC-sha512 [closed]
https://security.stackexchange.com/questions/269287/john-returns-invalid-utf-8-and-askes-for-hmac-sha256-and-hmac-sha512
#passwordcracking #johntheripper #bruteforce #hmac -
Is it possible to use hashcat or john the ripper on a .drmz file?
https://security.stackexchange.com/questions/269010/is-it-possible-to-use-hashcat-or-john-the-ripper-on-a-drmz-file
#johntheripper #hashcat #hash #pdf -
Still the same thrill when #JohnTheRipper cracks a hash, even after all these years! 🎉
-
JohnTheRipper: unexpected runtime to crack easy passwords [closed]
https://security.stackexchange.com/questions/268267/johntheripper-unexpected-runtime-to-crack-easy-passwords
#johntheripper -
#JohnTheRipper Pen Testing: Review & Tutorial
https://www.esecurityplanet.com/products/john-the-ripper/ -
John The Ripper for multiple dictionary words
https://security.stackexchange.com/questions/267426/john-the-ripper-for-multiple-dictionary-words
#johntheripper #passphrase #passwords -
CW: A grim reflection on the possible 2023 Hacking Pandemic, courtesy of LastPass Hackers
The Export>Import is not bad, the big job is changing out all those passwords because right now all those passwords are in the hands of the crime syndicate and their heirs, successors and assigns.
Likely seeking the high value targets but maybe just running #hashcat #johntheripper type crackers - premium versions - looking for whatever breaks first. Next would be either a ransomware outbreak/pandemic, or, perhaps worse, a long term bore-from-within.
Think about it - they might by now already have penetrated & planted malware on accounts before the targets changed out their passwords. As one expert (which I am not) suggests, just retire all those old accounts. Probably not a bad idea.
-
Looks like time for an #introduction ...
I'm a senior #softwaredeveloper who have designed and/or implemented vulnerability scanners, WAF, IDS/IPS, Web Secure Gateway, single-sign-on reverse proxies for several security companies. I have more recently worked on product security for large #opensource project, and eventually turned into a depressed #CISO before jumping back on coding microservices in Go. For a few years I've worked on DNS steering optimization for the #CDN of large scale networks.
As a work hobby, I love re-exploring old or abandoned algorithms for modern security challenges, especially in the domain of large data processing, and often in the world of password cracking (I'm a #JohnTheRipper user since 1997 and had my first autograph signed by SolarDiz in 2001 😅).
As real hobbies, I'm a terrible but regular long distance runner, I 3d print and laser cut some shit I design and I bike on a Brompton and a trike from ICE.
-
what rules list do you use for #johntheripper password cracking? any tips? Looking for 3rd party rulesets, already tried ALL rules that come with #johntheripper
-
sagt mal, gibt es aktuelle Excel-Dateien, die durch einen Passwortschutz tatsächlich auch verschlüsselt sind? Und nicht nur so pseudoverschlüsselt sondern schon, dass man #johntheripper bemüht?
Ich bin mit diesem Format echt nicht so dicke… -
heise+ | Windows-Helfer: Nützliche Hacking-Tools für den Alltag
Haben Sie ein Passwort vergessen oder wichtige Dateien versehentlich gelöscht? So schlüpfen Sie in die Rolle eines Hackers und verschaffen sich wieder Zugriff.
Windows-Helfer: Nützliche Hacking-Tools für den Alltag -
#JohnTheRipper (#John) is an advanced password #cracking tool.
John the Ripper is a tool designed to guess passwords efficiently. John supports several cracking algorithms, including dictionary and brute forcing, as well as many hashing and encryption algorithms. John is extendable, and can be made to perform other types of cracking. An official GUI called Johnny also exists.
Website 🔗️: https://www.openwall.com/john/ https://github.com/magnumripper/JohnTheRipper
apt 📦️: john
