The process consists of generating the hash of each password, to later compare the hash that we want to break, if the hash is the same then we have discovered the password, if the hash does not match then it is not the key and we will have to continue testing. This program allows us to crack passwords by dictionary, if we download one or more Internet password dictionaries of several tens of GB, the tool will be in charge of testing each and every one of these keys to try to crack the password hash. John the Ripper allows you to pause the cracking of the password and continue it at another time, this is ideal in case we have to turn off our PC or server, in addition, it can be automated to start cracking a certain password when starting our computer, and all this automatically without the need for system administrator intervention. It also allows us to configure what range of letters, numbers or symbols we can try to decipher the password, in addition, it also allows us to include rules to decide how the different variations should be made. This program is highly customizable, it allows us to define the length of a password to be tested, to generate all possible combinations and achieve the goal of cracking the hash. oriented to pentesting and computer security already incorporate this program by default.
Some very important features of this program is that it is optimized for many processor models, it works on many PC architectures and also on different operating systems, however, it is generally used on Linux-based operating systems, in fact, the main Linux distributions. This program is capable of automatically detecting the type of hash we are cracking, in order to make it easier for the user to crack it without having to worry about the type of hash it is trying to “break”.
This program is capable of breaking MD5, SHA-1 and many other hashes widely used in the computing world. For those who do not know it yet, John the Ripper is a password cracking tool written in C and widely used by security analysts to check the robustness of a key against brute force attacks.
0 kommentar(er)
