Password Attacks
John the Ripper
CPU-focused password cracker with jumbo community builds.
Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.
When
Cracking common hashes without GPU or using format-specific helpers.
How
Prepare hash file; john --wordlist; use --show; unshadow for /etc/shadow.
Why
Portable, scriptable, great for Linux hash formats.
Commands & usage
john --wordlist=rockyou.txt hashes.txt
john --format=NT hashes.txt
unshadow passwd shadow > unshadowed.txt && john unshadowed.txt
john --show hashes.txt
Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.
Comparisons
ATT&CK
Tags
Related in Password Attacks
Hashcat
GPU-accelerated password recovery tool supporting hundreds of hash types.
Hydra
Online password brute-forcer for many network services.
Medusa
Parallel, modular online credential brute-forcing tool.
Crowbar
Brute force tool specializing in RDP, VPN, VNC key/password attacks.
CeWL
Custom wordlist generator from target website wording.
Crunch
Wordlist generator for charsets and patterns.