UGN Security Forums UGN Security: Underground General How do you use John the reaper?

I've just downloaded john the reaper's password cracker but I don't know how to utilize it on my programs (how to crack passwords). Could someone help and explain it in simple terms. Thanks

John The Ripper you mean? And if you didn't then you got some cheap knockoff.

JTR is a commandline utility. Open a command line (start-->run-->cmd), navigate to the dir where you put it, and type in the name of the exe. By default it should print out the options you can pass to it.

As well, there is prolly some kind of README or help.txt file included with it. Read it.

Infinite

I went to start-run-cmd the commandline popped up and dissappeared. Wht should I do?

never mind I got it

but now I am at the cmdline how do I set it up so that I can crck say a game password?

john the ripper is a weak password tester that can decrypt DES3 encrypted passwords from unix machines the passwords must be in the format that *nix use in the /etc/shadow file.

root:3ew3JKdwSalNe:12000:0:10000::::

is an example I made for the format

user:(encrypted password 13characters long):::::::

the numbers arent really important you can put some random ones in there UIDs and GIDs

You can use a passlist which is probably a lot easier and less time/processor consuming than a straight up brute force attempt with the

john -wordfile:examplepasswordlist.txt password.file

or to brute force just use

john -i passwordfile

that should be fine for now..