Password Cracking

John The Ripper

Basic usage

john --wordlist=wordlist.txt hash.txt --format=NT

With rules

It is also possible to apply (all) rules to the provided passwords to cover a wider range of possibilities.

John rules are stored in /etc/john/john.conf.

john --wordlist=wordlist.txt hash.txt --format=NT --rules=All

KoreLogic rules

In order to add KoreLogic rules to john default rules, proceed as follows:

curl https://raw.githubusercontent.com/SpiderLabs/KoreLogic-Rules/master/kore-logic-rules-full.txt >> /etc/john/john.conf

Hashcat

Basic usage

hashcat -a 0 -m 1000 hash.txt wordlist.txt

With rules

hashcat -a 0 -m 1000 hash.txt wordlist.txt -r /usr/share/hashcat/rules/best64.rule

One rule to rule them all

hashcat -a 0 -m 1000 hash.txt wordlist.txt -r OneRuleToRuleThemAll.rule

Github repository: https://github.com/NotSoSecure/password_cracking_rules