Alternatives to John?

[TheWard3n]

Fellow HTS members,

I was wondering what alternative to John The Ripper ('John' on Linux) you'd suggest. I'm running Ubuntu.

In Ubuntu 12.10, some bug causes John to not work correctly.

Some of the Realistis missions here on HTS require the use of password/hash cracking tools, and many suggest to use John. I could install it on windows, but it's frustrating to re-boot, and I'd rather stick to Ubuntu.

I know there are many alternatives, but I don't know which one would be considered viable/efficient.

Any help would be greately appreciated.

Regards, happy hacking.

[pretentious]

I've actually never used john but i assume it's a generic command line cracker so an alternative i can think of is hashcat. I'm sure there are more but that's off the top of my head

-- Sun May 05, 2013 1:52 am --

so i actually read your post, I don't see why any crackers wouldn't be efficient. There is a mission with a specific encryption format, so i'm not too sure about that one but general hashes just require brute forcing, which any cracker can do

[-Ninjex-]

Fellow HTS members,

I was wondering what alternative to John The Ripper ('John' on Linux) you'd suggest. I'm running Ubuntu.

In Ubuntu 12.10, some bug causes John to not work correctly.

Some of the Realistis missions here on HTS require the use of password/hash cracking tools, and many suggest to use John. I could install it on windows, but it's frustrating to re-boot, and I'd rather stick to Ubuntu.

I know there are many alternatives, but I don't know which one would be considered viable/efficient.

Any help would be greately appreciated.

Regards, happy hacking.

Well first thing is first, JTR should work perfectly in Ubuntu.
Secondly, if you must go grab either a BT5/Kali iso file, and run it in a VM, as it will come pre-installed.
Third, Hashcat is better than JTR imo, and is the only other tool really worth mentioning.
Finally, if you want to crack some MD5's, it is going to come down to having a good dictionary, opposed to whether you are using JTR or Hashcat, all they will do (for the most part, but not 100%) is change the rate of how fast the MD5's are being compared. If you try running a dictionary attack with a terrible dictionary, you will not get very far.

[brutal_hacker]

Since the beginning of time people have had problems with JTR especially on linux there are forums full of Q and A's on this. I tried it on 4 distros it only worked on backtrack that's down to the fact its pre installed. Every other method was saying its found the key but the key was always wrong. The whole shadow and unshadow process as well.

I got it working on windows easily no problems on that one but thats windows and for me I found it to run alot slower.

Like previously mentioned wether it works or not is all about your wordlist. Crap wordlist = you aint getting anywhere.

You can try Cain and Abel works for MD4 MD5 etc or you can actually google the hash you have found actually does work sometimes lol. Or use an online one or whatever anyone else thinks.

Good luck..

[3vilp4wn]

1.) Use this.
2.) ???
3.) PROFIT!