John the Ripper - Password Cracker

John the Ripper is a popular open-source password cracking tool used to test the strength of password hashes obtained during security assessments.

How It Works

John the Ripper takes password hashes and attempts to recover the original password by generating candidate passwords, hashing them the same way, and comparing the result to the target hash.

Cracking Modes

Single crack mode uses information about the account to guess likely passwords, wordlist mode tests entries from a dictionary file, and incremental mode systematically tries all possible character combinations.

Supported Hash Formats

The tool supports a wide range of hash types, including those used by Unix systems, Windows NTLM, and many application-specific formats, automatically detecting the format when possible.

Ethical and Practical Use

Security teams use John the Ripper to audit password policies by testing how quickly employee password hashes can be cracked, helping justify stronger password requirements, always within authorized engagements.