THM John The Ripper - grunt92/IT-Sec-WriteUps GitHub Wiki
No answer needed
Jumbo John
rockyou.com
MD5
Run john --format=Raw-MD5 hash1.txt --wordlist=/Path/to/wordlist.txt
and you get the password:
biscuit
sha1
Run john --format=Raw-SHA1 hash2.txt --wordlist=/Path/to/wordlist.txt
and you get the password:
kangeroo
sha256
Run john --format=Raw-SHA256 hash3.txt --wordlist=/Path/to/wordlist.txt
and you get the password:
microphone
whirlpool
Run john --format=whirlpool hash4.txt --wordlist=/Path/to/wordlist.txt
and you get the password:
colossal
NT
Run john --format=NT ntlm.txt --wordlist=/Path/to/wordlist.txt
and you get the password:
mushroom
Copy root:x:0:0::/root:/bin/bash
into a "passwd"-file and root:$6$Ha.d5nGupBm29pYr$yugXSk24ZljLTAZZagtGwpSQhb3F2DOJtnHrvk7HI2ma4GsuioHp8sm3LJiRJpKfIf7lZQ29qgtH17Q/JDpYM/:18576::::::
into a "shadow"-file.
Run unshadow passwd shadow > hash
to create a unshadowed hash-file. Than run john hash --wordlist=/Path/to/wordlist.txt
to get the password.
1234
Download the file and change to content by inserting "joker:" in front of the hash. Than run john --single --format=RAW-MD5 hash7.txt
to get the answer.
Jok3r
Password complexity predictability
Az"[A-Z]"
--rule=THMRules
Use zip2john secure.zip > secure.txt
to create a txt-file and than use john --wordlist=/Path/to/wordlist.txt secure.txt
to get the password.
pass123
Unzip the zip-file and open the txt-file to get the flag.
THM{w3ll_d0n3_h4sh_r0y4l}
Use rar2john secure.zip > secure.txt
to create a txt-file and than use john --wordlist=/Path/to/wordlist.txt secure.txt
to get the password.
password
Extract the rar-file using the password and open the contained flag to get the flag.
THM{r4r_4rch1ve5_th15_t1m3}
Use ssh2john idrsa.id_rsa > id.txt
to create a txt-file and than use john --wordlist=/Path/to/wordlist.txt id.txt
to get the password.
mango
No answer needed