0% found this document useful (0 votes)
47 views43 pages

Tools JohnTheRipper

Uploaded by

decodermc
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
47 views43 pages

Tools JohnTheRipper

Uploaded by

decodermc
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 43

TUTORIAL: JOHN THE RIPPER

JOHN THE RIPPER


Es un software para password cracking desarrollado por Openwall. Posee una
combinación de programas de password crackers, autodetecta tipos de hashes.

JTR viene preinstalado en Kali, fue originamente desarrollado para Linux pero ahora
existe para multiples plataformas.

JTR puede trabajar en tres modos: Single Crack Mode, Wordlist Crack Mode e
Incremental Crack Mode.

Ejemplo Single Crack Mode: archivo de texto conteniendo user y pass la cual esta
encriptada con SHA1.

Comando: john --single --format=raw-sha1 crack.txt

Ejemplo Wordlist Crack Mode: archivo de texto conteniendo user y pass la cual esta
encriptada con SHA1.

En este ejemplo se usa un Wordlist o diccionario.

Comando: john --wordlist=/usr/share/john/password.lst --format=raw-sha1


crack.txt

Ejemplo crackear credenciales de usuario Linux.

Para ello lo primero es abrir el archivo shadow de la siguiente manera:

cat /etc/shadow, copiamos los datos del usuario a crackear y lo pegamos en un txt.

www.pengowin.com.ar
Ahora ejecutamos el comando

John file.txt y obtenemos la siguiente salida con los datos de la clave.

www.pengowin.com.ar
Vamos a usar Rockyou.txt como nuestro diccionario.

Ejemplo decrypt hash SHA1

john --wordlist=/usr/share/wordlists/rockyou.txt --format=raw-sha1 crack.txt

Ejemplo decrypt hash MD5

john --wordlist=/usr/share/wordlists/rockyou.txt --format=raw-md5 crack.txt

Ejemplo decrypt hash MD4

john --wordlist=/usr/share/wordlists/rockyou.txt --format=raw-md4 crack.txt

www.pengowin.com.ar
Help del comando
John the Ripper password cracker, version 1.8.0-jumbo-1_omp [linux-gnu 64-bit
AVX2-autoconf]
Copyright (c) 1996-2014 by Solar Designer and others
Homepage: http://www.openwall.com/john/

Usage: john [OPTIONS] [PASSWORD-FILES]


--single[=SECTION] "single crack" mode
--wordlist[=FILE] --stdin wordlist mode, read words from FILE or stdin
--pipe like --stdin, but bulk reads, and allows rules
--loopback[=FILE] like --wordlist, but fetch words from a .pot file
--dupe-suppression suppress all dupes in wordlist (and force preload)
--encoding=NAME input encoding (eg. UTF-8, ISO-8859-1). See also
doc/ENCODING and --list=hidden-options.
--rules[=SECTION] enable word mangling rules for wordlist modes
--incremental[=MODE] "incremental" mode [using section MODE]
--mask=MASK mask mode using MASK
--markov[=OPTIONS] "Markov" mode (see doc/MARKOV)
--external=MODE external mode or word filter
--stdout[=LENGTH] just output candidate passwords [cut at LENGTH]
--restore[=NAME] restore an interrupted session [called NAME]
--session=NAME give a new session the NAME
--status[=NAME] print status of a session [called NAME]
--make-charset=FILE make a charset file. It will be overwritten
--show[=LEFT] show cracked passwords [if =LEFT, then uncracked]
--test[=TIME] run tests and benchmarks for TIME seconds each
--users=[-]LOGIN|UID[,..] [do not] load this (these) user(s) only
--groups=[-]GID[,..] load users [not] of this (these) group(s) only
--shells=[-]SHELL[,..] load users with[out] this (these) shell(s) only

www.pengowin.com.ar
--salts=[-]COUNT[:MAX] load salts with[out] COUNT [to MAX] hashes
--save-memory=LEVEL enable memory saving, at LEVEL 1..3
--node=MIN[-MAX]/TOTAL this node's number range out of TOTAL count
--fork=N fork N processes
--pot=NAME pot file to use
--list=WHAT list capabilities, see --list=help or doc/OPTIONS
--format=NAME force hash type NAME: 7z AFS agilekeychain aix-smd5
aix-ssha1 aix-ssha256 aix-ssha512 asa-md5 bcrypt
bfegg Bitcoin blackberry-es10 Blockchain bsdicrypt
chap Citrix_NS10 Clipperz cloudkeychain cq CRC32
crypt dahua descrypt Django django-scrypt dmd5 dmg
dominosec dragonfly3-32 dragonfly3-64 dragonfly4-32
dragonfly4-64 Drupal7 dummy dynamic_n eCryptfs EFS
eigrp EncFS EPI EPiServer fde FormSpring Fortigate
gost gpg HAVAL-128-4 HAVAL-256-3 hdaa HMAC-MD5
HMAC-SHA1 HMAC-SHA224 HMAC-SHA256 HMAC-SHA384
HMAC-SHA512 hMailServer hsrp IKE ipb2 KeePass
keychain keyring keystore known_hosts krb4 krb5
krb5-18 krb5pa-md5 krb5pa-sha1 kwallet LastPass LM
lotus5 lotus85 LUKS MD2 md4-gen md5crypt md5ns mdc2
MediaWiki MongoDB Mozilla mscash mscash2 MSCHAPv2
mschapv2-naive mssql mssql05 mssql12 mysql mysql-sha1
mysqlna net-md5 net-sha1 nethalflm netlm netlmv2
netntlm netntlm-naive netntlmv2 nk nsldap NT nt2
o5logon ODF Office oldoffice OpenBSD-SoftRAID
openssl-enc OpenVMS oracle oracle11 osc Panama
PBKDF2-HMAC-SHA1 PBKDF2-HMAC-SHA256
PBKDF2-HMAC-SHA512 PDF PFX phpass PHPS pix-md5 PKZIP
po postgres PST PuTTY pwsafe RACF RAdmin RAKP rar
RAR5 Raw-Blake2 Raw-Keccak Raw-Keccak-256 Raw-MD4
Raw-MD5 Raw-MD5u Raw-SHA Raw-SHA1 Raw-SHA1-Linkedin
Raw-SHA1-ng Raw-SHA224 Raw-SHA256 Raw-SHA256-ng
Raw-SHA384 Raw-SHA512 Raw-SHA512-ng ripemd-128
ripemd-160 rsvp Salted-SHA1 sapb sapg scrypt sha1-gen
sha1crypt sha256crypt sha512crypt Siemens-S7 SIP
skein-256 skein-512 skey Snefru-128 Snefru-256 SSH

www.pengowin.com.ar
SSH-ng SSHA512 STRIP SunMD5 sxc Sybase-PROP sybasease
tc_aes_xts tc_ripemd160 tc_sha512 tc_whirlpool
tcp-md5 Tiger tripcode VNC vtp wbb3 whirlpool
whirlpool0 whirlpool1 WoWSRP wpapsk xsha xsha512 ZIP

Hashes Soportados
afs – Kerberos AFS DES
Supported Hash Formats

$ cat hashes.txt

$K4$a8dc8aeaa2c48a97,

$ john hashes.txt

$ john --format=afs hashes.txt

$ cat hashes.txt

username:$K4$a8dc8aeaa2c48a97,

$ john hashes.txt

$ john --format=afs hashes.txt

$ cat hashes.txt

username:$K4$a8dc8aeaa2c48a97,:::::::

$ john hashes.txt

$ john --format=afs hashes.txt

bfegg – Eggdrop
Supported Hash Formats

$ cat hashes.txt

+C/.8o.Wuph9.

$ john hashes.txt # Doesn't work. JTR detects hash as "Traditional DES".

$ john --format=bfegg hashes.txt

$ cat hashes.txt

www.pengowin.com.ar
username:+C/.8o.Wuph9.

$ john hashes.txt # Doesn't work. JTR detects hash as "Traditional DES".

$ john --format=bfegg hashes.txt

$ cat hashes.txt

username:+C/.8o.Wuph9.:::::::

$ john hashes.txt # Doesn't work. JTR detects hash as "Traditional DES".

$ john --format=bfegg hashes.txt

bf – OpenBSD Blowfish
Supported Hash Formats

$ cat hashes.txt

$2a$05$CCCCCCCCCCCCCCCCCCCCC.7uG0VCzI2bS7j6ymqJi9CdcdxiRTWNy

$ john hashes.txt

$ john --format=bf hashes.txt

$ cat hashes.txt

username:$2a$05$CCCCCCCCCCCCCCCCCCCCC.7uG0VCzI2bS7j6ymqJi9CdcdxiRT
WNy

$ john hashes.txt

$ john --format=bf hashes.txt

$ cat hashes.txt

username:$2a$05$CCCCCCCCCCCCCCCCCCCCC.7uG0VCzI2bS7j6ymqJi9CdcdxiRT
WNy:::::::

$ john hashes.txt

$ john --format=bf hashes.txt

bsdi – BSDI DES


Supported Hash Formats

$ cat hashes.txt

_J9..SDSD5YGyRCr4W4c

www.pengowin.com.ar
$ john hashes.txt

$ john --format=bsdi hashes.txt

$ cat hashes.txt

username:_J9..SDSD5YGyRCr4W4c

$ john hashes.txt

$ john --format=bsdi hashes.txt

$ cat hashes.txt

username:_J9..SDSD5YGyRCr4W4c:::::::

$ john hashes.txt

$ john --format=bsdi hashes.txt

crypt – generic crypt(3)


Supported Hash Formats

$ cat hashes.txt

SDbsugeBiC58A

$ john hashes.txt # Doesn't work. JTR detects hash as "Traditional DES".

$ john --format=crypt hashes.txt

$ cat hashes.txt

username:SDbsugeBiC58A

$ john hashes.txt # Doesn't work. JTR detects hash as "Traditional DES".

$ john --format=crypt hashes.txt

$ cat hashes.txt

username:SDbsugeBiC58A:::::::

$ john hashes.txt # Doesn't work. JTR detects hash as "Traditional DES".

$ john --format=crypt hashes.txt

des – Traditional DES


Supported Hash Formats

www.pengowin.com.ar
$ cat hashes.txt

SDbsugeBiC58A

$ john hashes.txt

$ john --format=des hashes.txt

$ cat hashes.txt

username:SDbsugeBiC58A

$ john hashes.txt

$ john --format=des hashes.txt

$ cat hashes.txt

username:SDbsugeBiC58A:::::::

$ john hashes.txt

$ john --format=des hashes.txt

dominosec – More Secure Internet Password


Supported Hash Formats

$ cat hashes.txt

(GVMroLzc50YK/Yd+L8KH)

$ john hashes.txt

$ john --format=dominosec hashes.txt

$ cat hashes.txt

username:(GVMroLzc50YK/Yd+L8KH)

$ john hashes.txt

$ john --format=dominosec hashes.txt

$ cat hashes.txt

username:(GVMroLzc50YK/Yd+L8KH):::::::

$ john hashes.txt

$ john --format=dominosec hashes.txt

www.pengowin.com.ar
<none> – EPiServer SID Hashes
Supported Hash Formats

$ cat hashes.txt

0x5F1D84A6DE97E2BEFB637A3CB5318AFEF0750B856CF1836BD1D4470175BE
0x4D5EFDFA143EDF74193076F174AC47CEBF2F417F

$ john hashes.txt

$ # NB: There is no --format option for this hash type

$ cat hashes.txt

username:0x5F1D84A6DE97E2BEFB637A3CB5318AFEF0750B856CF1836BD1D4470
175BE 0x4D5EFDFA143EDF74193076F174AC47CEBF2F417F

$ john hashes.txt

$ # NB: There is no --format option for this hash type

$ cat hashes.txt

username:0x5F1D84A6DE97E2BEFB637A3CB5318AFEF0750B856CF1836BD1D4470
175BE 0x4D5EFDFA143EDF74193076F174AC47CEBF2F417F:::::::

$ john hashes.txt

$ # NB: There is no --format option for this hash type

hdaa – HTTP Digest access authentication


Supported Hash Formats

$ cat hashes.txt

$response$679066476e67b5c7c4e88f04be567f8b$user$myrealm$GET$/$8c12bd8f
728afe56d45a0ce846b70e5a$00000001$4b61913cec32e2c9$auth

$ john hashes.txt

$ john --format=hdaa hashes.txt

$ cat hashes.txt

username:$response$679066476e67b5c7c4e88f04be567f8b$user$myrealm$GET$/
$8c12bd8f728afe56d45a0ce846b70e5a$00000001$4b61913cec32e2c9$auth

$ john hashes.txt

$ john --format=hdaa hashes.txt

www.pengowin.com.ar
$ cat hashes.txt

username:$response$679066476e67b5c7c4e88f04be567f8b$user$myrealm$GET$/
$8c12bd8f728afe56d45a0ce846b70e5a$00000001$4b61913cec32e2c9$auth:::::::

$ john hashes.txt

$ john --format=hdaa hashes.txt

hmac-md5 – HMAC MD5


Supported Hash Formats

$ cat hashes.txt

what do ya want for nothing?#750c783e6ab0b503eaa86e310a5db738

$ john hashes.txt

$ john --format=hmac-md5 hashes.txt

$ cat hashes.txt

username:what do ya want for nothing?#750c783e6ab0b503eaa86e310a5db738

$ john hashes.txt

$ john --format=hmac-md5 hashes.txt

$ cat hashes.txt

username:what do ya want for


nothing?#750c783e6ab0b503eaa86e310a5db738:::::::

$ john hashes.txt

$ john --format=hmac-md5 hashes.txt

hmailserver – hmailserver
Supported Hash Formats

$ cat hashes.txt

cc06fa688a64cdeea43d3c0fb761fede7e3ccf00a9daea9c79f7d458e06f88327f16dd

$ john hashes.txt

$ john --format=hmailserver hashes.txt

$ cat hashes.txt

www.pengowin.com.ar
username:cc06fa688a64cdeea43d3c0fb761fede7e3ccf00a9daea9c79f7d458e06f883
27f16dd

$ john hashes.txt

$ john --format=hmailserver hashes.txt

$ cat hashes.txt

username:cc06fa688a64cdeea43d3c0fb761fede7e3ccf00a9daea9c79f7d458e06f883
27f16dd:::::::

$ john hashes.txt

$ john --format=hmailserver hashes.txt

ipb2 – IPB2 MD5


Supported Hash Formats

$ cat hashes.txt

$IPB2$2e75504633$d891f03a7327639bc632d62a7f302604

$ john hashes.txt

$ john --format=ipb2 hashes.txt

$ cat hashes.txt

username:$IPB2$2e75504633$d891f03a7327639bc632d62a7f302604

$ john hashes.txt

$ john --format=ipb2 hashes.txt

$ cat hashes.txt

username:$IPB2$2e75504633$d891f03a7327639bc632d62a7f302604:::::::

$ john hashes.txt

$ john --format=ipb2 hashes.txt

krb4 – Kerberos v4 TGT


Supported Hash Formats

$ cat hashes.txt

$af$ENGIN.UMICH.EDU$44feffd06e68e30bc8890e253760858d

www.pengowin.com.ar
$ john hashes.txt

$ john --format=krb4 hashes.txt

$ cat hashes.txt

username:$af$ENGIN.UMICH.EDU$44feffd06e68e30bc8890e253760858d

$ john hashes.txt

$ john --format=krb4 hashes.txt

$ cat hashes.txt

username:$af$ENGIN.UMICH.EDU$44feffd06e68e30bc8890e253760858d:::::::

$ john hashes.txt

$ john --format=krb4 hashes.txt

krb5 – Kerberos v5 TGT


Supported Hash Formats

$ cat hashes.txt

$krb5$oskov$ACM.UIUC.EDU$4730d7249765615d6f3652321c4fb76d09fb9cd06faeb
0c31b8737f9fdfcde4bd4259c31cb1dff25df39173b09abdff08373302d99ac09802a29
0915243d9f0ea0313fdedc7f8d1fae0d9df8f0ee6233818d317f03a72c2e77b480b2bc5
0d1ca14fba85133ea00e472c50dbc825291e2853bd60a969ddb69dae35b604b34ea2
c2265a4ffc72e9fb811da17c7f2887ccb17e2f87cd1f6c28a9afc0c083a9356a9ee2a28d
2e4a01fc7ea90cc8836b8e25650c3a1409b811d0bad42a59aa418143291d42d7b1e6c
b5b1876a4cc758d721323a762e943f774630385c9faa68df6f3a94422f97

$ john hashes.txt

$ john --format=krb5 hashes.txt

$ cat hashes.txt

username:$krb5$oskov$ACM.UIUC.EDU$4730d7249765615d6f3652321c4fb76d09f
b9cd06faeb0c31b8737f9fdfcde4bd4259c31cb1dff25df39173b09abdff08373302d99a
c09802a290915243d9f0ea0313fdedc7f8d1fae0d9df8f0ee6233818d317f03a72c2e77
b480b2bc50d1ca14fba85133ea00e472c50dbc825291e2853bd60a969ddb69dae35b
604b34ea2c2265a4ffc72e9fb811da17c7f2887ccb17e2f87cd1f6c28a9afc0c083a9356
a9ee2a28d2e4a01fc7ea90cc8836b8e25650c3a1409b811d0bad42a59aa418143291d
42d7b1e6cb5b1876a4cc758d721323a762e943f774630385c9faa68df6f3a94422f97

$ john hashes.txt

$ john --format=krb5 hashes.txt

$ cat hashes.txt

www.pengowin.com.ar
username:$krb5$oskov$ACM.UIUC.EDU$4730d7249765615d6f3652321c4fb76d09f
b9cd06faeb0c31b8737f9fdfcde4bd4259c31cb1dff25df39173b09abdff08373302d99a
c09802a290915243d9f0ea0313fdedc7f8d1fae0d9df8f0ee6233818d317f03a72c2e77
b480b2bc50d1ca14fba85133ea00e472c50dbc825291e2853bd60a969ddb69dae35b
604b34ea2c2265a4ffc72e9fb811da17c7f2887ccb17e2f87cd1f6c28a9afc0c083a9356
a9ee2a28d2e4a01fc7ea90cc8836b8e25650c3a1409b811d0bad42a59aa418143291d
42d7b1e6cb5b1876a4cc758d721323a762e943f774630385c9faa68df6f3a94422f97:
::::::

$ john hashes.txt

$ john --format=krb5 hashes.txt

lm – LM DES
Supported Hash Formats

$ cat hashes.txt

$LM$a9c604d244c4e99d

$ john hashes.txt

$ john --format=lm hashes.txt

$ cat hashes.txt

username:$LM$a9c604d244c4e99d

$ john hashes.txt

$ john --format=lm hashes.txt

$ cat hashes.txt

username:$LM$a9c604d244c4e99d:::::::

$ john hashes.txt

$ john --format=lm hashes.txt

lotus5 – Lotus5
Supported Hash Formats

$ cat hashes.txt

355E98E7C7B59BD810ED845AD0FD2FC4

$ john hashes.txt # Doesn't work. JTR detects hash as "LM DES".

$ john --format=lotus5 hashes.txt

www.pengowin.com.ar
$ cat hashes.txt

username:355E98E7C7B59BD810ED845AD0FD2FC4

$ john hashes.txt # Doesn't work. JTR detects hash as "LM DES".

$ john --format=lotus5 hashes.txt

$ cat hashes.txt

username:355E98E7C7B59BD810ED845AD0FD2FC4:::::::

$ john hashes.txt # Doesn't work. JTR detects hash as "LM DES".

$ john --format=lotus5 hashes.txt

md4-gen – Generic salted MD4


Supported Hash Formats

$ cat hashes.txt

$MD4p$salt$15ad2b7a23e5088942f9d3772181b384

$ john hashes.txt

$ john --format=md4-gen hashes.txt

$ cat hashes.txt

username:$MD4p$salt$15ad2b7a23e5088942f9d3772181b384

$ john hashes.txt

$ john --format=md4-gen hashes.txt

$ cat hashes.txt

username:$MD4p$salt$15ad2b7a23e5088942f9d3772181b384:::::::

$ john hashes.txt

$ john --format=md4-gen hashes.txt

md5 – FreeBSD MD5


Supported Hash Formats

$ cat hashes.txt

$1$12345678$aIccj83HRDBo6ux1bVx7D1

www.pengowin.com.ar
$ john hashes.txt

$ john --format=md5 hashes.txt

$ cat hashes.txt

username:$1$12345678$aIccj83HRDBo6ux1bVx7D1

$ john hashes.txt

$ john --format=md5 hashes.txt

$ cat hashes.txt

username:$1$12345678$aIccj83HRDBo6ux1bVx7D1:::::::

$ john hashes.txt

$ john --format=md5 hashes.txt

$ cat hashes.txt

$apr1$Q6ZYh...$RV6ft2bZ8j.NGrxLYaJt9.

$ john hashes.txt

$ john --format=md5 hashes.txt

$ cat hashes.txt

username:$apr1$Q6ZYh...$RV6ft2bZ8j.NGrxLYaJt9.

$ john hashes.txt

$ john --format=md5 hashes.txt

$ cat hashes.txt

username:$apr1$Q6ZYh...$RV6ft2bZ8j.NGrxLYaJt9.:::::::

$ john hashes.txt

$ john --format=md5 hashes.txt

mediawiki – MediaWiki MD5s


Supported Hash Formats

$ cat hashes.txt

$B$113$de2874e33da25313d808d2a8cbf31485

$ john hashes.txt

www.pengowin.com.ar
$ john --format=mediawiki hashes.txt

$ cat hashes.txt

username:$B$113$de2874e33da25313d808d2a8cbf31485

$ john hashes.txt

$ john --format=mediawiki hashes.txt

$ cat hashes.txt

username:$B$113$de2874e33da25313d808d2a8cbf31485:::::::

$ john hashes.txt

$ john --format=mediawiki hashes.txt

mscash – M$ Cache Hash


Supported Hash Formats

$ cat hashes.txt

M$test1#64cd29e36a8431a2b111378564a10631

$ john hashes.txt # Doesn't work. JTR detects hash as "HMAC MD5".

$ john --format=mscash hashes.txt

$ cat hashes.txt

username:M$test1#64cd29e36a8431a2b111378564a10631

$ john hashes.txt # Doesn't work. JTR detects hash as "HMAC MD5".

$ john --format=mscash hashes.txt

$ cat hashes.txt

username:M$test1#64cd29e36a8431a2b111378564a10631:::::::

$ john hashes.txt # Doesn't work. JTR detects hash as "HMAC MD5".

$ john --format=mscash hashes.txt

mscash2 – M$ Cache Hash 2 (DCC2)


Supported Hash Formats

$ cat hashes.txt

www.pengowin.com.ar
$DCC2$10240#test1#607bbe89611e37446e736f7856515bf8

$ john hashes.txt # Doesn't work. JTR detects hash as "M$ Cache Hash".

$ john --format=mscash2 hashes.txt

$ cat hashes.txt

username:$DCC2$10240#test1#607bbe89611e37446e736f7856515bf8

$ john hashes.txt

$ john --format=mscash2 hashes.txt

$ cat hashes.txt

username:$DCC2$10240#test1#607bbe89611e37446e736f7856515bf8:::::::

$ john hashes.txt

$ john --format=mscash2 hashes.txt

mschapv2 – MSCHAPv2 C/R MD4 DES


Supported Hash Formats

$ cat hashes.txt

$MSCHAPv2$d94e7c7972b2376b28c268583e162de7$eba25a3b04d2c7085d01f842
e2befc91745c40db0f792356$0677ca7318fd7f65ae1b4f58c9f4f400$lameuser

$ john hashes.txt

$ john --format=mschapv2 hashes.txt

$ cat hashes.txt

username:$MSCHAPv2$d94e7c7972b2376b28c268583e162de7$eba25a3b04d2c70
85d01f842e2befc91745c40db0f792356$0677ca7318fd7f65ae1b4f58c9f4f400$lame
user

$ john hashes.txt

$ john --format=mschapv2 hashes.txt

$ cat hashes.txt

username:$MSCHAPv2$d94e7c7972b2376b28c268583e162de7$eba25a3b04d2c70
85d01f842e2befc91745c40db0f792356$0677ca7318fd7f65ae1b4f58c9f4f400$lame
user:::::::

$ john hashes.txt

www.pengowin.com.ar
$ john --format=mschapv2 hashes.txt

mskrb5 – MS Kerberos 5 AS-REQ Pre-Auth


Supported Hash Formats

$ cat hashes.txt

$mskrb5$$$98cd00b6f222d1d34e08fe0823196e0b$5937503ec29e3ce4e94a05163
2d0fff7b6781f93e3decf7dca707340239300d602932154

$ john hashes.txt

$ john --format=mskrb5 hashes.txt

$ cat hashes.txt

username:$mskrb5$$$98cd00b6f222d1d34e08fe0823196e0b$5937503ec29e3ce4e
94a051632d0fff7b6781f93e3decf7dca707340239300d602932154

$ john hashes.txt

$ john --format=mskrb5 hashes.txt

$ cat hashes.txt

username:$mskrb5$$$98cd00b6f222d1d34e08fe0823196e0b$5937503ec29e3ce4e
94a051632d0fff7b6781f93e3decf7dca707340239300d602932154:::::::

$ john hashes.txt

$ john --format=mskrb5 hashes.txt

mssql05 – MS-SQL05
Supported Hash Formats

$ cat hashes.txt

0x01004086CEB6BF932BC4151A1AF1F13CD17301D70816A8886908

$ john hashes.txt

$ john --format=mssql05 hashes.txt

$ cat hashes.txt

username:0x01004086CEB6BF932BC4151A1AF1F13CD17301D70816A8886908

$ john hashes.txt

$ john --format=mssql05 hashes.txt

www.pengowin.com.ar
$ cat hashes.txt

username:0x01004086CEB6BF932BC4151A1AF1F13CD17301D70816A8886908::::
:::

$ john hashes.txt

$ john --format=mssql05 hashes.txt

mssql – MS-SQL
Supported Hash Formats

$ cat hashes.txt

0x0100A607BA7C54A24D17B565C59F1743776A10250F581D482DA8B6D6261460D
3F53B279CC6913CE747006A2E3254

$ john hashes.txt

$ john --format=mssql hashes.txt

$ cat hashes.txt

username:0x0100A607BA7C54A24D17B565C59F1743776A10250F581D482DA8B6
D6261460D3F53B279CC6913CE747006A2E3254

$ john hashes.txt

$ john --format=mssql hashes.txt

$ cat hashes.txt

username:0x0100A607BA7C54A24D17B565C59F1743776A10250F581D482DA8B6
D6261460D3F53B279CC6913CE747006A2E3254:::::::

$ john hashes.txt

$ john --format=mssql hashes.txt

mysql-fast – MYSQL_fast
Supported Hash Formats

$ cat hashes.txt

60671c896665c3fa

$ john hashes.txt

$ john --format=mysql-fast hashes.txt

www.pengowin.com.ar
$ cat hashes.txt

username:60671c896665c3fa

$ john hashes.txt

$ john --format=mysql-fast hashes.txt

$ cat hashes.txt

username:60671c896665c3fa:::::::

$ john hashes.txt

$ john --format=mysql-fast hashes.txt

mysql – MYSQL
Supported Hash Formats

$ cat hashes.txt

5d2e19393cc5ef67

$ john hashes.txt # Doesn't work. JTR detects hash as "MYSQL_fast".

$ john --format=mysql hashes.txt

$ cat hashes.txt

username:5d2e19393cc5ef67

$ john hashes.txt # Doesn't work. JTR detects hash as "MYSQL_fast".

$ john --format=mysql hashes.txt

$ cat hashes.txt

username:5d2e19393cc5ef67:::::::

$ john hashes.txt # Doesn't work. JTR detects hash as "MYSQL_fast".

$ john --format=mysql hashes.txt

mysql-sha1 – MySQL 4.1 double-SHA-1


Supported Hash Formats

$ cat hashes.txt

*2470C0C06DEE42FD1618BB99005ADCA2EC9D1E19

www.pengowin.com.ar
$ john hashes.txt

$ john --format=mysql-sha1 hashes.txt

$ cat hashes.txt

username:*2470C0C06DEE42FD1618BB99005ADCA2EC9D1E19

$ john hashes.txt

$ john --format=mysql-sha1 hashes.txt

$ cat hashes.txt

username:*2470C0C06DEE42FD1618BB99005ADCA2EC9D1E19:::::::

$ john hashes.txt

$ john --format=mysql-sha1 hashes.txt

netlm – LM C/R DES


Supported Hash Formats

$ cat hashes.txt

$NETLM$1122334455667788$0836F085B124F33895875FB1951905DD2F85252CC7
31BB25

$ john hashes.txt

$ john --format=netlm hashes.txt

$ cat hashes.txt

username:$NETLM$1122334455667788$0836F085B124F33895875FB1951905DD2
F85252CC731BB25

$ john hashes.txt

$ john --format=netlm hashes.txt

$ cat hashes.txt

username:$NETLM$1122334455667788$0836F085B124F33895875FB1951905DD2
F85252CC731BB25:::::::

$ john hashes.txt

$ john --format=netlm hashes.txt

netlmv2 – LMv2 C/R MD4 HMAC-MD5

www.pengowin.com.ar
Supported Hash Formats

$ cat hashes.txt

$NETLMv2$USER1$1122334455667788$B1D163EA5881504F3963DC50FCDC26C1$
EB4D9E8138149E20

$ john hashes.txt

$ john --format=netlmv2 hashes.txt

$ cat hashes.txt

username:$NETLMv2$USER1$1122334455667788$B1D163EA5881504F3963DC50F
CDC26C1$EB4D9E8138149E20

$ john hashes.txt

$ john --format=netlmv2 hashes.txt

$ cat hashes.txt

username:$NETLMv2$USER1$1122334455667788$B1D163EA5881504F3963DC50F
CDC26C1$EB4D9E8138149E20:::::::

$ john hashes.txt

$ john --format=netlmv2 hashes.txt

netntlm – NTLMv1 C/R MD4 DES [ESS MD5]


Supported Hash Formats

$ cat hashes.txt

$NETNTLM$1122334455667788$B2B2220790F40C88BCFF347C652F67A7C4A70D3
BEBD70233

$ john hashes.txt

$ john --format=netntlm hashes.txt

$ cat hashes.txt

username:$NETNTLM$1122334455667788$B2B2220790F40C88BCFF347C652F67A
7C4A70D3BEBD70233

$ john hashes.txt

$ john --format=netntlm hashes.txt

$ cat hashes.txt

www.pengowin.com.ar
username:$NETNTLM$1122334455667788$B2B2220790F40C88BCFF347C652F67A
7C4A70D3BEBD70233:::::::

$ john hashes.txt

$ john --format=netntlm hashes.txt

netntlmv2 – NTLMv2 C/R MD4 HMAC-MD5


Supported Hash Formats

$ cat hashes.txt

$NETNTLMv2$NTLMV2TESTWORKGROUP$1122334455667788$07659A550D5E9D0
2996DFD95C87EC1D5$0101000000000000006CF6385B74CA01B3610B02D99732D
D000000000200120057004F0052004B00470052004F00550050000100200044004
100540041002E00420049004E0043002D005300450043005500520049000000000
0

$ john hashes.txt

$ john --format=netntlmv2 hashes.txt

$ cat hashes.txt

username:$NETNTLMv2$NTLMV2TESTWORKGROUP$1122334455667788$07659A5
50D5E9D02996DFD95C87EC1D5$0101000000000000006CF6385B74CA01B3610B0
2D99732DD000000000200120057004F0052004B00470052004F005500500001002
00044004100540041002E00420049004E0043002D0053004500430055005200490
000000000

$ john hashes.txt

$ john --format=netntlmv2 hashes.txt

$ cat hashes.txt

username:$NETNTLMv2$NTLMV2TESTWORKGROUP$1122334455667788$07659A5
50D5E9D02996DFD95C87EC1D5$0101000000000000006CF6385B74CA01B3610B0
2D99732DD000000000200120057004F0052004B00470052004F005500500001002
00044004100540041002E00420049004E0043002D0053004500430055005200490
000000000:::::::

$ john hashes.txt

$ john --format=netntlmv2 hashes.txt

nethalflm – HalfLM C/R DES


Supported Hash Formats

$ cat hashes.txt

www.pengowin.com.ar
$NETHALFLM$1122334455667788$6E1EC36D3417CE9E09A4424309F116C4C9919
48DAEB4ADAD

$ john hashes.txt

$ john --format=nethalflm hashes.txt

$ cat hashes.txt

username:$NETHALFLM$1122334455667788$6E1EC36D3417CE9E09A4424309F11
6C4C991948DAEB4ADAD

$ john hashes.txt

$ john --format=nethalflm hashes.txt

$ cat hashes.txt

username:$NETHALFLM$1122334455667788$6E1EC36D3417CE9E09A4424309F11
6C4C991948DAEB4ADAD:::::::

$ john hashes.txt

$ john --format=nethalflm hashes.txt

md5ns – Netscreen MD5


Supported Hash Formats

$ cat hashes.txt

admin$nMjFM0rdC9iOc+xIFsGEm3LtAeGZhn

$ john hashes.txt

$ john --format=md5ns hashes.txt

$ cat hashes.txt

username:admin$nMjFM0rdC9iOc+xIFsGEm3LtAeGZhn

$ john hashes.txt

$ john --format=md5ns hashes.txt

$ cat hashes.txt

username:admin$nMjFM0rdC9iOc+xIFsGEm3LtAeGZhn:::::::

$ john hashes.txt

$ john --format=md5ns hashes.txt

www.pengowin.com.ar
nsldap – Netscape LDAP SHA
Supported Hash Formats

$ cat hashes.txt

{SHA}cMiB1KJphN3OeV9vcYF8nPRIDnk=

$ john hashes.txt

$ john --format=nsldap hashes.txt

$ cat hashes.txt

username:{SHA}cMiB1KJphN3OeV9vcYF8nPRIDnk=

$ john hashes.txt

$ john --format=nsldap hashes.txt

$ cat hashes.txt

username:{SHA}cMiB1KJphN3OeV9vcYF8nPRIDnk=:::::::

$ john hashes.txt

$ john --format=nsldap hashes.txt

ssha – Netscape LDAP SSHA


Supported Hash Formats

$ cat hashes.txt

{SSHA}WTT3B9Jjr8gOt0Q7WMs9/XvukyhTQj0Ns0jMKQ==

$ john hashes.txt

$ john --format=ssha hashes.txt

$ cat hashes.txt

username:{SSHA}WTT3B9Jjr8gOt0Q7WMs9/XvukyhTQj0Ns0jMKQ==

$ john hashes.txt

$ john --format=ssha hashes.txt

$ cat hashes.txt

username:{SSHA}WTT3B9Jjr8gOt0Q7WMs9/XvukyhTQj0Ns0jMKQ==:::::::

www.pengowin.com.ar
$ john hashes.txt

$ john --format=ssha hashes.txt

nt – NT MD4
Supported Hash Formats

$ cat hashes.txt

$NT$8846f7eaee8fb117ad06bdd830b7586c

$ john hashes.txt

$ john --format=nt hashes.txt

$ cat hashes.txt

username:$NT$8846f7eaee8fb117ad06bdd830b7586c

$ john hashes.txt

$ john --format=nt hashes.txt

$ cat hashes.txt

username:$NT$8846f7eaee8fb117ad06bdd830b7586c:::::::

$ john hashes.txt

$ john --format=nt hashes.txt

openssha – OpenLDAP SSHA


Supported Hash Formats

$ cat hashes.txt

{SSHA}hHSEPW3qeiOo5Pl2MpHQCXh0vgfyVR/X

$ john hashes.txt

$ john --format=openssha hashes.txt

$ cat hashes.txt

username:{SSHA}hHSEPW3qeiOo5Pl2MpHQCXh0vgfyVR/X

$ john hashes.txt

www.pengowin.com.ar
$ john --format=openssha hashes.txt

$ cat hashes.txt

username:{SSHA}hHSEPW3qeiOo5Pl2MpHQCXh0vgfyVR/X:::::::

$ john hashes.txt

$ john --format=openssha hashes.txt

oracle11 – Oracle 11g


Supported Hash Formats

$ cat hashes.txt

5FDAB69F543563582BA57894FE1C1361FB8ED57B903603F2C52ED1B4D642

$ john hashes.txt

$ john --format=oracle11 hashes.txt

$ cat hashes.txt

username:5FDAB69F543563582BA57894FE1C1361FB8ED57B903603F2C52ED1B4D
642

$ john hashes.txt

$ john --format=oracle11 hashes.txt

$ cat hashes.txt

username:5FDAB69F543563582BA57894FE1C1361FB8ED57B903603F2C52ED1B4D
642:::::::

$ john hashes.txt

$ john --format=oracle11 hashes.txt

oracle – Oracle
Supported Hash Formats

$ cat hashes.txt

O$SIMON#4F8BC1809CB2AF77

$ john hashes.txt

$ john --format=oracle hashes.txt

www.pengowin.com.ar
$ cat hashes.txt

username:O$SIMON#4F8BC1809CB2AF77

$ john hashes.txt

$ john --format=oracle hashes.txt

$ cat hashes.txt

username:O$SIMON#4F8BC1809CB2AF77:::::::

$ john hashes.txt

$ john --format=oracle hashes.txt

pdf – pdf
Supported Hash Formats

$ cat hashes.txt

$pdf$Standard*badad1e86442699427116d3e5d5271bc80a27814fc5e80f815efeef8
39354c5f*289ece9b5ce451a5d7064693dab3badf101112131415161718191a1b1c1d
1e1f*16*34b1b6e593787af681a9b63fa8bf563b*1*1*0*1*4*128*-4*3*2

$ john hashes.txt

$ john --format=pdf hashes.txt

$ cat hashes.txt

username:$pdf$Standard*badad1e86442699427116d3e5d5271bc80a27814fc5e80f
815efeef839354c5f*289ece9b5ce451a5d7064693dab3badf1011121314151617181
91a1b1c1d1e1f*16*34b1b6e593787af681a9b63fa8bf563b*1*1*0*1*4*128*-
4*3*2

$ john hashes.txt

$ john --format=pdf hashes.txt

$ cat hashes.txt

username:$pdf$Standard*badad1e86442699427116d3e5d5271bc80a27814fc5e80f
815efeef839354c5f*289ece9b5ce451a5d7064693dab3badf1011121314151617181
91a1b1c1d1e1f*16*34b1b6e593787af681a9b63fa8bf563b*1*1*0*1*4*128*-
4*3*2:::::::

$ john hashes.txt

$ john --format=pdf hashes.txt

phpass-md5 – PHPass MD5

www.pengowin.com.ar
Supported Hash Formats

$ cat hashes.txt

$H$9aaaaaSXBjgypwqm.JsMssPLiS8YQ00

$ john hashes.txt

$ john --format=phpass-md5 hashes.txt

$ cat hashes.txt

username:$H$9aaaaaSXBjgypwqm.JsMssPLiS8YQ00

$ john hashes.txt

$ john --format=phpass-md5 hashes.txt

$ cat hashes.txt

username:$H$9aaaaaSXBjgypwqm.JsMssPLiS8YQ00:::::::

$ john hashes.txt

$ john --format=phpass-md5 hashes.txt

phps – PHPS MD5


Supported Hash Formats

$ cat hashes.txt

$PHPS$433925$5d756853cd63acee76e6dcd6d3728447

$ john hashes.txt

$ john --format=phps hashes.txt

$ cat hashes.txt

username:$PHPS$433925$5d756853cd63acee76e6dcd6d3728447

$ john hashes.txt

$ john --format=phps hashes.txt

$ cat hashes.txt

username:$PHPS$433925$5d756853cd63acee76e6dcd6d3728447:::::::

$ john hashes.txt

www.pengowin.com.ar
$ john --format=phps hashes.txt

pix-md5 – PIX MD5


Supported Hash Formats

$ cat hashes.txt

NuLKvvWGg.x9HEKO

$ john hashes.txt

$ john --format=pix-md5 hashes.txt

$ cat hashes.txt

username:NuLKvvWGg.x9HEKO

$ john hashes.txt

$ john --format=pix-md5 hashes.txt

$ cat hashes.txt

username:NuLKvvWGg.x9HEKO:::::::

$ john hashes.txt

$ john --format=pix-md5 hashes.txt

po – Post.Office MD5
Supported Hash Formats

$ cat hashes.txt

0c78bdef7d5448105cfbbc9aaa490a44550c41c11bab48f9dbd8203ed313eef0

$ john hashes.txt

$ john --format=po hashes.txt

$ cat hashes.txt

username:0c78bdef7d5448105cfbbc9aaa490a44550c41c11bab48f9dbd8203ed313e
ef0

$ john hashes.txt

$ john --format=po hashes.txt

$ cat hashes.txt

www.pengowin.com.ar
username:0c78bdef7d5448105cfbbc9aaa490a44550c41c11bab48f9dbd8203ed313e
ef0:::::::

$ john hashes.txt

$ john --format=po hashes.txt

rar – rar
Supported Hash Formats

$ cat hashes.txt

$rar3$*0*c9dea41b149b53b4*fcbdb66122d8ebdb32532c22ca7ab9ec*24

$ john hashes.txt

$ john --format=rar hashes.txt

$ cat hashes.txt

username:$rar3$*0*c9dea41b149b53b4*fcbdb66122d8ebdb32532c22ca7ab9ec*2
4

$ john hashes.txt

$ john --format=rar hashes.txt

$ cat hashes.txt

username:$rar3$*0*c9dea41b149b53b4*fcbdb66122d8ebdb32532c22ca7ab9ec*2
4:::::::

$ john hashes.txt

$ john --format=rar hashes.txt

raw-md4 – Raw MD4


Supported Hash Formats

$ cat hashes.txt

8a9d093f14f8701df17732b2bb182c74

$ john hashes.txt # Doesn't work. JTR detects hash as "LM DES".

$ john --format=raw-md4 hashes.txt

$ cat hashes.txt

username:8a9d093f14f8701df17732b2bb182c74

www.pengowin.com.ar
$ john hashes.txt # Doesn't work. JTR detects hash as "LM DES".

$ john --format=raw-md4 hashes.txt

$ cat hashes.txt

username:8a9d093f14f8701df17732b2bb182c74:::::::

$ john hashes.txt # Doesn't work. JTR detects hash as "LM DES".

$ john --format=raw-md4 hashes.txt

raw-md5 – Raw MD5


Supported Hash Formats

$ cat hashes.txt

5a105e8b9d40e1329780d62ea2265d8a

$ john hashes.txt # Doesn't work. JTR detects hash as "LM DES".

$ john --format=raw-md5 hashes.txt

$ cat hashes.txt

username:5a105e8b9d40e1329780d62ea2265d8a

$ john hashes.txt # Doesn't work. JTR detects hash as "LM DES".

$ john --format=raw-md5 hashes.txt

$ cat hashes.txt

username:5a105e8b9d40e1329780d62ea2265d8a:::::::

$ john hashes.txt # Doesn't work. JTR detects hash as "LM DES".

$ john --format=raw-md5 hashes.txt

raw-md5-unicode – Raw MD5 of Unicode plaintext


Supported Hash Formats

$ cat hashes.txt

16c47151c18ac087cd12b3a70746c790

$ john hashes.txt # Doesn't work. JTR detects hash as "LM DES".

$ john --format=raw-md5-unicode hashes.txt

www.pengowin.com.ar
$ cat hashes.txt

username:16c47151c18ac087cd12b3a70746c790

$ john hashes.txt # Doesn't work. JTR detects hash as "LM DES".

$ john --format=raw-md5-unicode hashes.txt

$ cat hashes.txt

username:16c47151c18ac087cd12b3a70746c790:::::::

$ john hashes.txt # Doesn't work. JTR detects hash as "LM DES".

$ john --format=raw-md5-unicode hashes.txt

raw-sha1 – Raw SHA-1


Supported Hash Formats

$ cat hashes.txt

A9993E364706816ABA3E25717850C26C9CD0D89D

$ john hashes.txt

$ john --format=raw-sha1 hashes.txt

$ cat hashes.txt

username:A9993E364706816ABA3E25717850C26C9CD0D89D

$ john hashes.txt

$ john --format=raw-sha1 hashes.txt

$ cat hashes.txt

username:A9993E364706816ABA3E25717850C26C9CD0D89D:::::::

$ john hashes.txt

$ john --format=raw-sha1 hashes.txt

raw-sha224 – Raw SHA-224


Supported Hash Formats

$ cat hashes.txt

d63dc919e201d7bc4c825630d2cf25fdc93d4b2f0d46706d29038d01

www.pengowin.com.ar
$ john hashes.txt

$ john --format=raw-sha224 hashes.txt

$ cat hashes.txt

username:d63dc919e201d7bc4c825630d2cf25fdc93d4b2f0d46706d29038d01

$ john hashes.txt

$ john --format=raw-sha224 hashes.txt

$ cat hashes.txt

username:d63dc919e201d7bc4c825630d2cf25fdc93d4b2f0d46706d29038d01::::::
:

$ john hashes.txt

$ john --format=raw-sha224 hashes.txt

raw-sha256 – Raw SHA-256


Supported Hash Formats

$ cat hashes.txt

5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8

$ john hashes.txt # Doesn't work. JTR detects hash as "Post.Office MD5".

$ john --format=raw-sha256 hashes.txt

$ cat hashes.txt

username:5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d15
42d8

$ john hashes.txt # Doesn't work. JTR detects hash as "Post.Office MD5".

$ john --format=raw-sha256 hashes.txt

$ cat hashes.txt

username:5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d15
42d8:::::::

$ john hashes.txt # Doesn't work. JTR detects hash as "Post.Office MD5".

$ john --format=raw-sha256 hashes.txt

raw-sha384 – Raw SHA-384

www.pengowin.com.ar
Supported Hash Formats

$ cat hashes.txt

a8b64babd0aca91a59bdbb7761b421d4f2bb38280d3a75ba0f21f2bebc45583d446c5
98660c94ce680c47d19c30783a7

$ john hashes.txt

$ john --format=raw-sha384 hashes.txt

$ cat hashes.txt

username:a8b64babd0aca91a59bdbb7761b421d4f2bb38280d3a75ba0f21f2bebc45
583d446c598660c94ce680c47d19c30783a7

$ john hashes.txt

$ john --format=raw-sha384 hashes.txt

$ cat hashes.txt

username:a8b64babd0aca91a59bdbb7761b421d4f2bb38280d3a75ba0f21f2bebc45
583d446c598660c94ce680c47d19c30783a7:::::::

$ john hashes.txt

$ john --format=raw-sha384 hashes.txt

raw-sha512 – Raw SHA-512


Supported Hash Formats

$ cat hashes.txt

b109f3bbbc244eb82441917ed06d618b9008dd09b3befd1b5e07394c706a8bb980b1
d7785e5976ec049b46df5f1326af5a2ea6d103fd07c95385ffab0cacbc86

$ john hashes.txt

$ john --format=raw-sha512 hashes.txt

$ cat hashes.txt

username:b109f3bbbc244eb82441917ed06d618b9008dd09b3befd1b5e07394c706a
8bb980b1d7785e5976ec049b46df5f1326af5a2ea6d103fd07c95385ffab0cacbc86

$ john hashes.txt

$ john --format=raw-sha512 hashes.txt

$ cat hashes.txt

www.pengowin.com.ar
username:b109f3bbbc244eb82441917ed06d618b9008dd09b3befd1b5e07394c706a
8bb980b1d7785e5976ec049b46df5f1326af5a2ea6d103fd07c95385ffab0cacbc86::::
:::

$ john hashes.txt

$ john --format=raw-sha512 hashes.txt

$ cat hashes.txt

$SHA512$fa585d89c851dd338a70dcf535aa2a92fee7836dd6aff1226583e88e09962
93f16bc009c652826e0fc5c706695a03cddce372f139eff4d13959da6f1f5d3eabe

$ john hashes.txt

$ john --format=raw-sha512 hashes.txt

$ cat hashes.txt

username:$SHA512$fa585d89c851dd338a70dcf535aa2a92fee7836dd6aff1226583e
88e0996293f16bc009c652826e0fc5c706695a03cddce372f139eff4d13959da6f1f5d3
eabe

$ john hashes.txt

$ john --format=raw-sha512 hashes.txt

$ cat hashes.txt

username:$SHA512$fa585d89c851dd338a70dcf535aa2a92fee7836dd6aff1226583e
88e0996293f16bc009c652826e0fc5c706695a03cddce372f139eff4d13959da6f1f5d3
eabe:::::::

$ john hashes.txt

$ john --format=raw-sha512 hashes.txt

salted-sha – Salted SHA


Supported Hash Formats

$ cat hashes.txt

{SSHA}hHSEPW3qeiOo5Pl2MpHQCXh0vgfyVR/X

$ john hashes.txt # Doesn't work. JTR detects hash as "OpenLDAP SSHA".

$ john --format=salted-sha hashes.txt

$ cat hashes.txt

username:{SSHA}hHSEPW3qeiOo5Pl2MpHQCXh0vgfyVR/X

www.pengowin.com.ar
$ john hashes.txt # Doesn't work. JTR detects hash as "OpenLDAP SSHA".

$ john --format=salted-sha hashes.txt

$ cat hashes.txt

username:{SSHA}hHSEPW3qeiOo5Pl2MpHQCXh0vgfyVR/X:::::::

$ john hashes.txt # Doesn't work. JTR detects hash as "OpenLDAP SSHA".

$ john --format=salted-sha hashes.txt

sapb – SAP BCODE


Supported Hash Formats

$ cat hashes.txt

ROOT $8366A4E9E6B72CB0

$ john hashes.txt

$ john --format=sapb hashes.txt

$ cat hashes.txt

username:ROOT $8366A4E9E6B72CB0

$ john hashes.txt

$ john --format=sapb hashes.txt

$ cat hashes.txt

username:ROOT $8366A4E9E6B72CB0:::::::

$ john hashes.txt

$ john --format=sapb hashes.txt

sapg – SAP CODVN G (PASSCODE)


Supported Hash Formats

$ cat hashes.txt

ROOT $1194E38F14B9F3F8DA1B181F14DEB70E7BDCC239

$ john hashes.txt

$ john --format=sapg hashes.txt

www.pengowin.com.ar
$ cat hashes.txt

username:ROOT
$1194E38F14B9F3F8DA1B181F14DEB70E7BDCC239

$ john hashes.txt

$ john --format=sapg hashes.txt

$ cat hashes.txt

username:ROOT
$1194E38F14B9F3F8DA1B181F14DEB70E7BDCC239:::::::

$ john hashes.txt

$ john --format=sapg hashes.txt

sha1-gen – Generic salted SHA-1


Supported Hash Formats

$ cat hashes.txt

$SHA1p$salt$59b3e8d637cf97edbe2384cf59cb7453dfe30789

$ john hashes.txt

$ john --format=sha1-gen hashes.txt

$ cat hashes.txt

username:$SHA1p$salt$59b3e8d637cf97edbe2384cf59cb7453dfe30789

$ john hashes.txt

$ john --format=sha1-gen hashes.txt

$ cat hashes.txt

username:$SHA1p$salt$59b3e8d637cf97edbe2384cf59cb7453dfe30789:::::::

$ john hashes.txt

$ john --format=sha1-gen hashes.txt

ssh – ssh
Supported Hash Formats

$ cat hashes.txt

www.pengowin.com.ar
$ssh2$2d2d2d2d2d424547494e204453412050524956415445204b45592d2d2d2d2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*7
71

$ john hashes.txt

$ john --format=ssh hashes.txt

$ cat hashes.txt

username:$ssh2$2d2d2d2d2d424547494e204453412050524956415445204b4559
2d2d2d2d2d0a50726f632d547970653a20342c454e435259505445440a44454b2d4
96e666f3a204145532d3132382d4342432c35413830363832373943304634364539
383230373135304133433245433631340a0a2f756954696e4a3452556a6f5a76302b
705931694d763163695661724369347a2f62365a694c4161565970794a316858543
27463692b593266334c61614578630a6f357772316141464d3437786d526d476f383
2492f76434847413952786735776147433970574f475a5675555172447355367463
556b434d422b325a344753390a354f44474364444b32674e6574446e62324a76487
3714154736d3443633633476468695a30734346594c71796d2b576531774359616c
78734f3231572b4f676f0a42336f6746464977327232462b714a7a714d3741554379
4c466869357a476d7536534e6558765534477a784750464a4e47306d414f5549776
1614e3161446a630a4e326b3462437266796271337a366e436533444273384b3232
694e2b3875526e534162434f717a5a5845645971555959354b6b6a326e654354525
458494e64670a512b61535359673379355937626f4b6b6a494f727650555748654f7
96475512b74657273414577376e43564a7a72394e38745267327156345055763143
4b66700a4f49467742372f39736f6d6a59496a71576f61537a6a784b30633852777a3
05331706d722b7571726277792b50656f75354d3373656d486c426b476955323766
0a776f684b792b4d554e4862734e6a7973535a53456c4e4b734d4950715449567a5a
45316d5646412f30754d477164705133627a424f6a58325a6f36656446434f0a6d4a3
4775961765735774d2b6a6d75564b5056564e7939395a78796570304645644c5035
4b623263345a6c3053396631342f62366836415069785665377a75760a5662536b4
279664a6e797a68494f5942497954374d64773134723441584a56362b5a6f4577303
97769774d3d0a2d2d2d2d2d454e44204453412050524956415445204b45592d2d2d
2d2d0a*771

$ john hashes.txt

www.pengowin.com.ar
$ john --format=ssh hashes.txt

$ cat hashes.txt

username:$ssh2$2d2d2d2d2d424547494e204453412050524956415445204b4559
2d2d2d2d2d0a50726f632d547970653a20342c454e435259505445440a44454b2d4
96e666f3a204145532d3132382d4342432c35413830363832373943304634364539
383230373135304133433245433631340a0a2f756954696e4a3452556a6f5a76302b
705931694d763163695661724369347a2f62365a694c4161565970794a316858543
27463692b593266334c61614578630a6f357772316141464d3437786d526d476f383
2492f76434847413952786735776147433970574f475a5675555172447355367463
556b434d422b325a344753390a354f44474364444b32674e6574446e62324a76487
3714154736d3443633633476468695a30734346594c71796d2b576531774359616c
78734f3231572b4f676f0a42336f6746464977327232462b714a7a714d3741554379
4c466869357a476d7536534e6558765534477a784750464a4e47306d414f5549776
1614e3161446a630a4e326b3462437266796271337a366e436533444273384b3232
694e2b3875526e534162434f717a5a5845645971555959354b6b6a326e654354525
458494e64670a512b61535359673379355937626f4b6b6a494f727650555748654f7
96475512b74657273414577376e43564a7a72394e38745267327156345055763143
4b66700a4f49467742372f39736f6d6a59496a71576f61537a6a784b30633852777a3
05331706d722b7571726277792b50656f75354d3373656d486c426b476955323766
0a776f684b792b4d554e4862734e6a7973535a53456c4e4b734d4950715449567a5a
45316d5646412f30754d477164705133627a424f6a58325a6f36656446434f0a6d4a3
4775961765735774d2b6a6d75564b5056564e7939395a78796570304645644c5035
4b623263345a6c3053396631342f62366836415069785665377a75760a5662536b4
279664a6e797a68494f5942497954374d64773134723441584a56362b5a6f4577303
97769774d3d0a2d2d2d2d2d454e44204453412050524956415445204b45592d2d2d
2d2d0a*771:::::::

$ john hashes.txt

$ john --format=ssh hashes.txt

sybasease – sybasease
Supported Hash Formats

$ cat hashes.txt

0xc0074BE393C06BE420AD541671aa5e6f1a19a4a73bb51c59f45790f0887cfb70e05
99747c6844d4556b3

$ john hashes.txt

$ john --format=sybasease hashes.txt

$ cat hashes.txt

username:0xc0074BE393C06BE420AD541671aa5e6f1a19a4a73bb51c59f45790f08
87cfb70e0599747c6844d4556b3

$ john hashes.txt

$ john --format=sybasease hashes.txt

www.pengowin.com.ar
$ cat hashes.txt

username:0xc0074BE393C06BE420AD541671aa5e6f1a19a4a73bb51c59f45790f08
87cfb70e0599747c6844d4556b3:::::::

$ john hashes.txt

$ john --format=sybasease hashes.txt

xsha – Mac OS X 10.4+ salted SHA-1


Supported Hash Formats

$ cat hashes.txt

12345678F9083C7F66F46A0A102E4CC17EC08C8AF120571B

$ john hashes.txt

$ john --format=xsha hashes.txt

$ cat hashes.txt

username:12345678F9083C7F66F46A0A102E4CC17EC08C8AF120571B

$ john hashes.txt

$ john --format=xsha hashes.txt

$ cat hashes.txt

username:12345678F9083C7F66F46A0A102E4CC17EC08C8AF120571B:::::::

$ john hashes.txt

$ john --format=xsha hashes.txt

zip – zip
Supported Hash Formats

$ cat hashes.txt

$zip$*0*1*8005b1b7d077708d*dee4

$ john hashes.txt

$ john --format=zip hashes.txt

$ cat hashes.txt

username:$zip$*0*1*8005b1b7d077708d*dee4

www.pengowin.com.ar
$ john hashes.txt

$ john --format=zip hashes.txt

$ cat hashes.txt

username:$zip$*0*1*8005b1b7d077708d*dee4:::::::

$ john hashes.txt

$ john --format=zip hashes.txt

Created/translated by: Claudio “Yunta” Giura.

www.pengowin.com.ar

You might also like