Word list mode is the simplest cracking mode. We need to specify the word list. The specified word list will we mangled according to default rules. Which means the words in the word list will be changed for usage.
单词列表模式是最简单的破解模式。 我们需要指定单词列表。 我们将根据默认规则对指定的单词列表进行处理。 这意味着单词列表中的单词将更改使用。
Word list should not contain duplicates which will bring down efficiency. To make thing more efficient word list can be provided in a sorted manner.
单词列表不应包含重复内容,这会降低效率。 为了使事情更有效率,可以以排序的方式提供单词表。
排序单词列表 (Sorting Word List)
Word list can be sorted like below to make John faster.
单词列表可以按如下排序,以使John更快。
$ tr A-Z a-z < SOURCE | sort -u > TARGET
Linux示例 (Linux Example)
We well use word list to crack our shadow file.
我们很好地使用单词列表来破解我们的影子文件。
$ john --wordlist wordlist.txt unshadowed
Warning: detected hash type "sha512crypt", but the string is also recognized as "crypt"
Use the "--format=crypt" option to force loading these as that type instead
Using default input encoding: UTF-8
Loaded 2 password hashes with 2 different salts (sha512crypt, crypt(3) $6$ [SHA512 128/128 SSE2 2x])
Press 'q' or Ctrl-C to abort, almost any other key for status
123456 (ismail)
Session completed
–wordlist will set word list file. -w can be used for abbreviation.
–wordlist将设置单词列表文件。 -w可以用作缩写。
在背景上启动John (Start John on Background)
Cracking passwords can take huge time. Some times we may want to close terminal where john runs but want to john run. The solution for this in linux is running john in background like below.
破解密码可能会花费大量时间。 有时我们可能想要关闭john所运行的终端,但是想要john所运行。 在Linux中解决此问题的方法是在后台运行john,如下所示。
$ john --wordlist=all.lst --rules mypasswd &
& runs john in background detaching from terminal
&在后台从终端分离运行john
To see status of john while running in background.
在后台运行时查看john的状态。
$ john --status
0g 0:00:00:03 2/3 0g/s 285.0p/s 285.0c/s 285.0C/s
–status show status of the John in the background
–status在后台显示John的状态
翻译自: https://www.poftut.com/crack-password-john-ripper-wordlist/