To be successful in cracking passwords, you have to use the right dictionary, the dictionary should
contain words in different languages, celebrity names, the name of football teams and so on.
Open world dot com.
The official website of Jundah report provides you a huge wordlist collection.
It includes work at least for more than 20 human languages and the likes of common passwords.
Unfortunately, it's not free.
However, you can find the many free water leaks on the Internet.
Let's move on and see how to combine more dictionary files into a single one.
I'll download a text file from school security dot org that contains the 500 worst passwords.
This is the fight I'm hoping that you are on and on, Carly, I am downloading it using double you get
I'm pasting the.
You are.
OK, this is the file.
The next step is to concatenate this new file to the existing dictionary files like this kept this file
and the other dictionary files, for example, USAR Share John and password that Elstein the output
reduction to greater size.
I'll append to the end of the file my dict, for example, that the.
I have combined these two files into a single file.
Maybe there are duplicate works and I want to remove them so that I have only unique words.
And I'll do Jon minus minus wordlist equals the name of the file, my dect that texte minus minus is
the out pipe, a vertical bar unique and the name of the file that will contain the unique words like
say my dictionary that texte.
There are three thousand six hundred twenty five unique words.
It's not a big list anyway.
Now, I can start, John, again, this time using the dictionary file I've already shown you so you'll
know how to do it.
Let's move on and see other options and ways of executing John.
If you want to load only accounts with a valid shell or with specific shell, you use minus minus shell
option like this, John, minus minus wordlist equals.
And the name of the file minus minus, minus, minus shell equals and the shell is with a comma between
them like say Besch and S.H. and the file that contains the hashes of the passwords.
Unshattered that it's in the same directory.
This file is in the current working directory.
OK, it's raining, I'm stopping, John.
I want to show you other examples, the minus minus useless option allows you to filter of your counts
for breaking, for example, the same comment.
And instead of minus minus shell option, I'll use minus minus users equals, let's say, admin, comma,
Mark.
It will try to crack only the passwords of admin and mark.
And it didn't find any password.
A dash before the list of the users can be used to invert the Krech.
Or allowed all the others that aren't listed like this.
Minus a good comma admin.
I have a boarded the station, the most powerful cracking mode in John is called incremental.
Let's start it, John minus minus incremental.
You can also use only minus I and the password file.
This will use the default incremental mode parameters, which are defined in the configuration file
section named incremental.
Let's see the configuration file of John.
This is John, that conv in ETSI, John.
Let's take a look there.
I'm opening the file for viewing using less ATC.
John, John, that this is the configuration file of John Draper.
And we see here many options regarding the way John works.
I'm searching for incremental, starting in an upper case, I later using and the word I'm searching
for incremental and I'm pressing on and many times to see the next crisis.
And this is the section incremental.
Callon, ask the session, the surrounding this station.
It uses all ASCII cars and tries passwords with a maximum length of 13 characters by combining all the
characters in all possible ways.
This will take a lot of time, probably more than you are willing to wait.
At this moment, after a few weeks of executing, John is searching only for passwords that have five
characters and 13, there is a long way ahead.