John the Ripper Help Needed Please

I'm trying to use John the Ripper, typing the following…

john\run\john –wordlist=wordlist.txt password.txt

The following error message appears…

stat: password.txt: No such file or directory

Yet there is a file of that name (containing the hash) in the same directory. Has anyone got any ideas what i'm doing wrong?

I've read the old forum threads and the articles about John the Ripper.

Thanks in advance, Zer0Man

Check if you have another instance of cygwin1.dll on your computer.

cd to the john\run directory first

lesserlightsofheaven wrote: Check if you have another instance of cygwin1.dll on your computer.

Thanks, yes the dll file was also in another program.

Scavix wrote: cd to the john\run directory first

Thanks, it appears to work, but then looks like it stops cracking.

What is the average amount of time JTR takes to crack challenge other 10?

hit any key and it will tell you what it's doing. For me, on my ancient dinosaur at 650mhz, it went over 2 days on a DES for one of the basic challenges… then sleazoid sent me the sleazoid the ripper prog he made in PHP and I used it after that. Of course, I had a better dictionary then, so it only took 15 minutes… :p

It really just depends on what type encryption, how strong the pass is, and how fast your computer is. If you want SleazoidTheRipper, go here: http://www.zomgz.info/apps/app/str.exe

and get a very big dictionary, sleazoid recommended bigdict.txt here: http://www.zomgz.info/words/bigdict.txt

Maybe it'll get it with a dictionary attack. I personally like STR's UI better t han JTR, and I just like using it better. It does DES, SHA1, and MD5 enc/decrypt.

Hope that helps, and thanks a ton to Sleazoid for the app!

@thorsdecree

haha thanks man

and yeah it does sha1/md5/des

use as you wish

:D

[edit]

if you actually use it you might want the readme http://www.zomgz.info/apps/app/README.txt

[/edit]

ThorsDecree wrote: hit any key and it will tell you what it's doing. For me, on my ancient dinosaur at 650mhz, it went over 2 days on a DES for one of the basic challenges… then sleazoid sent me the sleazoid the ripper prog he made in PHP and I used it after that. Of course, I had a better dictionary then, so it only took 15 minutes… :p

It really just depends on what type encryption, how strong the pass is, and how fast your computer is. If you want SleazoidTheRipper, go here: http://www.zomgz.info/apps/app/str.exe

and get a very big dictionary, sleazoid recommended bigdict.txt here: http://www.zomgz.info/words/bigdict.txt

Maybe it'll get it with a dictionary attack. I personally like STR's UI better t han JTR, and I just like using it better. It does DES, SHA1, and MD5 enc/decrypt.

Hope that helps, and thanks a ton to Sleazoid for the app!

I've downloaded STR and when the cracking has finished it states that the hash is 'invalid'… I'm trying it with the other 10 challenge.

Any ideas why it's not working?

Thanks in advance, Zer0Man