Kali Linux Web Penetration Testing Cookbook - Second Edition

How to do it...

Once we have a list of hashes to crack and a dictionary, let's proceed:

1. Although John the Ripper is very flexible with regards to how it receives input, to prevent misinterpretations, we first need to set usernames and password hashes in a specific format. Create a text file called hashes_6_7.txt, containing one name and hash per line, separated by a colon (username:hash), as illustrated:

2. Once we have the file, we can go to a Terminal and execute the john --wordlist=/usr/share/wordlists/rockyou.txt --format=raw-md5 hashes_6_7.txt command:

There are five out of six passwords in the word list. We can also see that john