Most useful and currently relevant excerpts from john-users mailing list

The subscription instructions for the john-users mailing list and links to full archives are available on the JtR homepage. The unsubscription instructions are available on this wiki.

The following are links to some selected postings:

• Reusing mining GPU rigs (2021/03/03)
• Generating multiple masks and dynamically distributing them across devices (2021/03/03)
• Does PCIe bandwidth matter? (2020/02/29)
• (On-device) mask and hybrid mode examples (2019/03/25)
• Cracking DES-based crypt(3), bcrypt, sha512crypt & Drupal 7+, sha256crypt, and md5crypt & phpass hashes on ZTEX 1.15y quad-FPGA boards (2016/11/06, 2017/06/25, 2018/07/23, 2018/08/27, 2018/10/12)
• JtR -jumbo on Windows, including OpenCL support (2018/09/15)
• Building Jumbo with autoconf and CPU/OpenMP fallback (2015/11/14)
• Loopback and encoding enhancements (2014/03/30)
• False positives explained (2014/02/23)
• Running Markov mode for a pre-determined amount of time (2013/06/13)
• Administrivia - quality of postings (2012/12/29)
• Understanding "fast" and "slow" hashes (2012/07/07)
• Running JtR on and/or against HP-UX Trusted System (2012/02/17)
• Cracking passwords with Unicode characters (2012/02/03)
• History of John the Ripper, part 1 (2011/09/03)
  • History of John the Ripper, part 2 (overlapping with part 1) (2015/09/10)
• Walkthrough on understanding/making wordlist rules (with preprocessor expansion) (2010/11/16)
• Cracking SMTP's AUTH CRAM-MD5 exchanges (2010/07/27)
• Cracking sniffed LM and NTLM challenge/response exchanges (2010/07/09)
• Estimating password complexity (theory, advanced) (2009/12/07)
• Making "incremental" mode follow a password policy by an external filter() (2009/10/28)
  • ...also for another policy (2009/02/10)
• On the purpose and the effect of "incremental" mode's CharCount setting (2009/07/26)
  • Using CharCount to restrict JtR to trying fewer characters (2009/02/20)
• Cracking Windows challenge/response authentication with Metasploit and JtR (2009/05/12)
• Cracking Windows password hash dumps obtained with Login Recovery's boot disks (2009/04/07)
• Invalid salts with traditional DES-based crypt(3) (2009/02/28)
• bigcrypt vs. crypt16 (2009/02/15)
  • Links to sample bigcrypt and crypt16 hashes (2009/02/15)
• On many valid-looking 13-character strings not being accepted as valid DES-based crypt(3) hash encodings (2009/02/05)
• Perl scripts to generate sample hashes (all supported Unix crypt(3), LM, NTLM) and files for testing of JtR (2008/06/18)
• What directories JtR searches for its configuration and data files; JtR "home directory"; system-wide installs (2008/06/16)
• How to deal with different (multiple) hash types ("formats"); the need for "unshadow" and "--show" (2008/01/21)
• "Idle" setting: system responsiveness and performance (2007/06/05)
• Processing wordlists from the Openwall collection (2007/06/05)
• Administrivia - list charter - what topics are desirable on john-users (2007/02/17)
• Perl scripts to combine multiple words from a wordlist, for passphrase cracking (2006/10/19)
• The "M" (memorize) and "Q" (query) rule commands explained, with examples (2006/06/28)
• Cracking Cisco IOS "type 5" passwords (2006/05/14)
• What salts are (2005/12/18)
• SAP R/3 password security (CODVN A, B, D) - initial posting (2005/12/11)
  • SAP R/3 password security - more detail (2005/12/13)
  • SAP R/3 password cracking implemented for JtR (now part of jumbo) (2008/06/26)
• Script to extract password hashes from a CommuniGate Pro messaging server for use with JtR (2005/11/22)

Back to John the Ripper user community resources.