What is John the Ripper?
John the Ripper is a powerful open-source password cracking tool used to
detect weak passwords by performing dictionary, brute-force, and hybrid attacks
against password hashes.
Common Cracking Commands
# Crack Linux shadow file
john /etc/shadow
# Use wordlist
john --wordlist=rockyou.txt hashes.txt
# Show cracked passwords
john --show hashes.txt
# Incremental brute force
john --incremental hashes.txt
Sample Output
Loaded 3 password hashes with 3 different salts
Press 'q' or Ctrl-C to abort, almost any other key for status
password123 (admin)
letmein (user)
iloveyou (test)
Session completed
Attack Phase Mapping
[ Credential Access ] → Offline hash cracking
[ Privilege Escalation ] → Reused weak passwords
[ Lateral Movement ] → Password reuse across systems
← Back to Tools
Home