security enabled verified medium v1.0.0

john

Leading password cracking tool supporting hundreds of hash types with multiple cracking modes (single, wordlist, incremental, external).

📋 Live Preview

john --wordlist={wordlist} {hash-file}

🌍 wordlist → 🌍 hash-file →

john --wordlist={wordlist} {hash-file}

Sandbox: execFile · Timeout: 86400s

Capabilities

security.crack.password

security.crack.hash

security.audit.credential

Parameters

Name	Type	Required	Default	Description	Aliases
`wordlist`	string	No	-	Wordlist file for dictionary attack	`--wordlist`
`rules`	string	No	-	Wordlist mangling rules	`--rules`
`format`	string	No	-	Hash format (e.g. raw-md5, bcrypt, sha512crypt)	`--format`
`incremental`	string	No	-	Incremental (brute-force) mode with charset	`--incremental`
`mask`	string	No	-	Mask for brute-force (e.g. ?l?l?l?d?d)	`--mask`
`session`	string	No	-	Session name for save/restore	`--session`
`restore`	string	No	-	Restore a previous cracking session	`--restore`
`show`	boolean	No	-	Show cracked passwords from pot file	`--show`
`pot`	string	No	-	Pot file path for cracked passwords	`--pot`
`node`	string	No	-	Node/distribution for cluster cracking	`--node`
`fork`	integer	No	-	Number of forked processes	`--fork`
`mem-file-size`	integer	No	-	Max memory per file buffer in MB	`--mem-file-size`
`max-candidates`	integer	No	-	Max candidates per second per thread	`--max-candidates`
`reject-printable`	boolean	No	-	Reject plaintexts with non-printable chars	`--reject-printable`
`limit`	integer	No	-	Max number of cracked passwords	`--limit`
`single`	boolean	No	-	Single crack mode using login/GECOS info	`--single`
`external`	string	No	-	External mode using user-defined functions	`--external`
`stdin`	boolean	No	-	Read candidates from stdin	`--stdin`
`config`	boolean	No	-	use FILE instead of john.conf or john.ini	`--config`
`encoding`	boolean	No	-	cp1251)	`--encoding`, `-8`
`groups`	boolean	No	-	crack specific group(s) only	`--groups`
`list`	boolean	No	-	list capabilities (formats, modes, etc)	`--list`
`make_charset`	boolean	No	-	generate charset file	`--make-charset`
`markov`	boolean	No	-	Markov mode	`--markov`
`max_run_time`	boolean	No	-	max runtime in seconds	`--max-run-time`
`prince`	boolean	No	-	PRINCE mode (read candidates from FILE)	`--prince`
`progress_every`	boolean	No	-	emit status line every N seconds	`--progress-every`
`rules_logic`	boolean	No	-	apply logic rules	`--rules-logic`
`rules_stack`	boolean	No	-	stack additional rule(s)	`--rules-stack`
`user`	boolean	No	-	crack specific user(s) only	`--user`

Artifacts

Type	Description	MIME	Schema	Trust
`security.crack.potfile`	Cracked password database	text/plain	-	verified
`security.crack.session`	Cracking session state for restore	application/octet-stream	-	verified

Contract

Inputs

security.hash.file

File containing password hashes to crack

security.wordlist

Wordlist for dictionary attack

security.rules

Mangling rules for wordlist mutations

Outputs

security.cracked.passwords

Successfully cracked passwords

security.crack.session

Cracking session state

Side effects: filesystem_writefilesystem_writefilesystem_write

Workflow Edges

Produces

security.cracked.passwordssecurity.crack.session

Consumes

security.hash.filesecurity.wordlistsecurity.rules

Resource Profile

Resource	Value
CPU	high
Memory	512 MB
Network	none
Disk I/O	medium

Examples

Single crack mode using login information

john --single hashes.txt

Wordlist mode with rules

john --wordlist=rockyou.txt --rules hashes.txt

Incremental (brute-force) mode

john --incremental hashes.txt

Show cracked passwords from pot file

john --show hashes.txt

Crack specific format with mask attack

john --format=raw-md5 --mask=?l?l?l?l?d?d hashes.txt

Restore a saved session

john --restore my-session

Fork across 4 CPU cores

john --fork=4 hashes.txt

Cluster cracking with node distribution

john --node=1/4 hashes.txt

Documentation

John the Ripper — Password Cracking

John the Ripper is a fast password cracker supporting hundreds of hash and cipher types across Unix, Windows, and web platforms. It offers multiple cracking modes: single (weak passwords from login info), wordlist (dictionary with rules), incremental (brute-force), and external (custom C-style functions).

Cracking Modes

Mode	Command	Description
Single	`john --single hashes.txt`	Uses login/GECOS info as password guesses
Wordlist	`john --wordlist=rockyou.txt hashes.txt`	Dictionary attack with optional mangling rules
Incremental	`john --incremental hashes.txt`	Brute-force using character set permutations
Mask	`john --mask=?l?l?l?d?d hashes.txt`	Targeted brute-force with positional masks
External	`john --external=myfilter hashes.txt`	Custom C-style password generation functions

Session Management

--session=name — assign a name to save/restore sessions
--restore=name — resume an interrupted cracking session
--pot=mypot.pot — specify custom pot file location
--show — display cracked passwords from pot file

Distributed Cracking

--fork=N — run N parallel processes on multi-core CPUs
--node=M/N — run as node M of N in a cluster

Related Tools

hashcathash-identifier