John the Ripper密码破解工具

2013-06-06

John the Ripper免费的开源软件，是一个快速的密码破解工具，用于在已知密文的情况下尝试破解出明文的破解密码软件，支持目前大多数的加密算法，如DES、MD5等。它支持多种不同类型的系统架构，包括Unix、Linux、Windows，主要目的是破解不够牢固的Unix/Linux系统密码。

目前的最新版本是John the Ripper 1.8.0版。

1、实例:
passwd.txt
包含内容用户名和待破解密码
user01:$6$mk0uhloh$/io7TWrWsEYDyglGEaqEuWIdl2NgCkvAHatuK2MUyKrc6KrYhs3buULEZoQtmKNaiqcQofNLfkhfi8gR0uZED0
password.lst包含密码字典

2、主要参数 ./john
John the Ripper password cracker, version 1.8.0
Copyright (c) 1996-2013 by Solar Designer
Homepage: http://www.openwall.com/john/

Usage: john [OPTIONS] [PASSWORD-FILES]
--single "single crack" mode简单解密模式
--wordlist=FILE --stdin wordlist mode, read words from FILE or stdin字典模式
--rules enable word mangling rules for wordlist mode
--incremental[=MODE] "incremental" mode [using section MODE]
--external=MODE external mode or word filter
--stdout[=LENGTH] just output candidate passwords [cut at LENGTH]
--restore[=NAME] restore an interrupted session [called NAME]
--session=NAME give a new session the NAME
--status[=NAME] print status of a session [called NAME]
--make-charset=FILE make a charset, FILE will be overwritten
--show show cracked passwords查看破解密码
--test[=TIME] run tests and benchmarks for TIME seconds each测试破解基准
--users=[-]LOGIN|UID[,..] [do not] load this (these) user(s) only
--groups=[-]GID[,..] load users [not] of this (these) group(s) only
--shells=[-]SHELL[,..] load users with[out] this (these) shell(s) only
--salts=[-]N load salts with[out] at least N passwords only
--save-memory=LEVEL enable memory saving, at LEVEL 1..3
--node=MIN[-MAX]/TOTAL this node's number range out of TOTAL count
--fork=N fork N processes
--format=NAME force hash type NAME: descrypt/bsdicrypt/md5crypt/
bcrypt/LM/AFS/tripcode/dummy
3、指定解密算法
./john --format=md5crypt passwds.txt

4、john.conf增加配置
# Incremental modes
[Incremental:a1]
CharCount = 36 (字符的个数,这儿是26个字母+10个数字)
MinLen = 6 (passwd的最小长度)
MaxLen = 8 (passwd的最大长度)
CharsetB = 1203984567smcbtdpajrhflgkwneiovyzuqx
CharsetM = 1203984567eaiornltsuchmdgpkbyvwfzxjq
CharsetE = 1203984567erynsatldoghikmcwpfubzjxvq

5、John the Ripper的官方网站:
http://www.openwall.com/john/

分类：安全 | 标签： |

相关日志

评论被关闭！