This wiki page is meant to be populated with sample password hash encoding strings and the corresponding plaintext passwords, as well as with info on the hash types. Relevant file formats (such as /etc/passwd, PWDUMP output, Cisco IOS config files, etc.) may also be mentioned.

See How to produce test hashes for various formats for how to generate arbitrary hashes yourself.

DDIC                                    $C94E2F7DD0178374

TEST_0001                               $7369F1C8ECD6FCA1C6413F07408CA281C7A85EF0

To have JtR load and crack these, the file must have the /etc/passwd format. (For LM and NTLM hashes, the PWDUMP output format may also be used.) For example:

$ cat pw-bigcrypt 
user:qiyh4XPJGsOZ2MEAyLkfWqeQ
$ cat w
passphrase
$ john --wordlist=w --rules pw-bigcrypt 
Loaded 2 password hashes with 2 different salts (Traditional DES [64/64 BS MMX])
se               (user:2)
passphra         (user:1)
guesses: 2  time: 0:00:00:00 100%  c/s: 3200  trying: passphra - se
$ john --show pw-bigcrypt 
user:passphrase

2 password hashes cracked, 0 left

Relevant john-users postings:

• http://www.openwall.com/lists/john-users/2009/02/15/4
• http://www.openwall.com/lists/john-users/2009/09/01/8

• 3107 of Unix crypt(3) hashes (4 flavors, plus bigcrypt for length 9+) and corresponding plaintext passwords
• 3107 of LM + NTLM hashes and corresponding plaintext passwords
• 100k of LM + NTLM hashes and corresponding plaintext passwords
• 3100+ of new EPiServer 6.x default hashes (using passwords from password.lst) + hash generation script in Python
• 3100+ of Django 1.4 hashes (using passwords from password.lst) + hash generation script in Python
• 3100+ of WoltLab BB3 hashes (using passwords from password.lst) + hash generation script in Python
• 3100+ of RACF hashes (using passwords from password.lst) + hash generation script in Python + C
• 3100+ of RACF hashes (using passwords from password.lst) + hash generation script in pure Python (recommended for testing)
• Apple Mountain Lion sample plist files and hashes (run ml2john.py on .plist files and then run john on the output of ml2john.py program)
• Apple Mountain Lion 10.8.2 sample plist file. This has a “password hint” given, that will crack the password.
• Many same-salt hashes intended for testing of -ztex formats

3107 is the number of entries in an older revision of JtR's default password.lst wordlist.

• http://pentestmonkey.net/cheat-sheet/john-the-ripper-hash-formats

Back to John the Ripper user community resources.