Sample non-hashes (to be) supported by JtR

NOTE: We now have a repo https://github.com/openwall/john-samples with all data from here.

JtR-jumbo supports way many more hashes (or non-hashes) than that are listed on this page.

Supported in JtR 1.7.9-jumbo-8 and above.

Sample 1Password “Agile Keychain” files

• openwall.agilekeychain.zip

Sample 7-Zip files

• 7-Zip-samples.tar.gz
• test-openwall-sfx.tar Self-extracting 7-Zip file
• Sample 7-Zip files

• Sample DMG files

New disk images created with a recent version of OSX, including .sparseimage and .sparsebundle which are also used by Apple Time Machine and FileVault (up to Lion)

• README.md
• Apple UDIF disk images

Sample Bitcoin Core wallet files

• sample-bitcoin-core-wallets.zip

Sample Bitcoin-based altcoin wallet files

• xdn_wallet.zip (DigitalNote [XDN] wallet using new Berkeley DB with btree version 10)

• Sample BitLocker disk images
• OpenCL BitLocker tutorial

Sample DHCP authentication packet captures

• Sample DHCP auth .pcap files

Version 1:

• Sample eCryptfs metadata ecryptfs_sample_metadata.tar (password is 'openwall')

Version 2:

• wrapped-passphrase file sample wrapped-passphrase.zip (password is 'openwall')

• Sample EFS “files” efs-samples.tar.bz2

• EFS “files” from Windows 10 efs-windows-10.zip

• usb-efs-jtr.7z File is a 7zip compressed DD image, it's 206Mb in total size only 175Mb used space.

Sample EIGRP MD5 authentication packet captures

• eigrp-v1.tar.bz2

Sample GELI encrypted disk images

• geli-samples.zip (created on FreeBSD 11.0)
• geli-samples-old.zip (created on FreeBSD 6.0 to 9.3)

• gadu-gadu.pcaps.tar.gz

Supported in JtR 1.7.9-jumbo-8 and above.

Sample GNOME Keyring file(s)

• openwall.keyring.tar

Supported in JtR 1.7.9-jumbo-8 and above.

Sample GnuPGP file(s)

• test.gpg.tar.gz
• gpg-70_flavors.tar.gz

Sample HSRP MD5 authentication packet captures

• hsrp-md5-auth-packets.tar.xz

Supported in JtR 1.7.9-jumbo-8 and above.

Sample IKE PSK file(s)

• ike-psk-samples.tar

Supported in JtR 1.7.9-jumbo-8 and above. Use Ettercap to get JtR compatible hashes from .pcap files.

Sample iSCSI CHAP pcap file(s)

• iSCSI-pcaps.tar.bz2

Sample iTunes Backup manifest files.

• sample-itunes-backup-manifests.zip

Sample Jetico BestCrypt Containers

• jetico-sample-containers.tar.xz

Supported in JtR 1.7.9-jumbo-6 and above.

Sample KeePass files

• KeePass-samples.tar
• KeePass-more-samples.zip
• twofish sample
• KeePass samples using key file(s)

Supported in JtR 1.7.7-jumbo-5 and above.

• krbv5-pcaps.tar.gz

http://www.securiteam.com/windowsntfocus/5BP0H0A6KM.html

Supported by https://github.com/magnumripper/JohnTheRipper/.

• keynote_files.zip

Supported in bleeding-jumbo (will be JtR 1.8.0-jumbo1) and above.

• keystore-samples.zip

Supported in bleeding-jumbo (will be JtR 1.8.0-jumbo1) and above.

• kwallet-samples.tar.gz

Sample LastPass files

• LastPass_Win32_Examples.zip

• sample-notes-id-openwall-64-bit-rc2.zip Sample Notes ID files using 64-bit RC2. Password is “openwall”. Created using Lotus 8.5.3.
• more-notes-id-samples.rar More sample Notes ID files. “admin.id” file is using 128-bit RC2. Created using Lotus 8.5.3.

Supported by JtR-jumbo (bleeding-jumbo branch).

Sample LUKS files

• LUKS-openwall.bz2
• LUKS-smaller.tar.bz2

Supported in JtR 1.7.9-jumbo-8 and above.

• MongoDB-pcaps.tar.gz

Supported in JtR 1.7.9-jumbo-6 and above.

Sample profiles (contributed by Rich and Dhiru)

• Mozilla-Profiles.zip

See doc/README.mozilla or latest README.mozilla for information about cracking Mozilla Master passwords.

Supported in JtR 1.7.9-jumbo-6 and above.

Sample keychain files (contributed by Erik)

• Keychain-Samples.zip

Sample encrypted disk images.

• bcrypt-pbkdf-openwall12345.raw.zip

• office_2016_samples.tar.gz

Sample files (contributed by Rich)

NOTE: Office 2003, 2007, 2010 files are supported by JtR 1.7.9-jumbo-7 and above. NOTE: Office 2013 will be supported by JtR 1.7.9-jumbo-8 and above.

The README files inside have further information and details about these files

• Office_Secrets.tar.gz
• 2010-powerpoint-openwall.rar
• Office-2013-samples.zip
• вα-к_тσ_єηgℓαη-.doc Office 2003 format (but created with LibreOffice) with Unicode name and Unicode document info embedded.

Supported in JtR 1.7.9-jumbo-8 and above. Use Ettercap to get JtR compatible hashes from .pcap files.

Sample Oracle O5LOGON pcap file(s)

• Oracle-O5LOGON.tar.gz
• Oracle-Captures.zip

Sample Padlock encrypted databases

• sample-padlock-databases.zip

Supported in JtR 1.7.9-jumbo-6 and above.

Sample Password Safe files

• Sample-Password-Safe-Safes.tar
• Password-Gorilla-openwall.zip

Supported in JtR 1.7.7-jumbo-6 and above.

Sample PDF files (mostly generated using Adobe Acrobat X Pro):

• pdf_samples.tar
• new-pdf-collection.tar
• sample pdfdump created using JtR's pdf2john tool
• PDF with meta data that hasn't been encrypted
• CMIYC 2013 pro PDF files
• some tests from Hashcat crew https://github.com/magnumripper/JohnTheRipper/pull/1052
• more tests from Hashcat https://github.com/magnumripper/JohnTheRipper/pull/1055

Supported by https://github.com/magnumripper/JohnTheRipper/

Sample file:

• Certificate PEM file, password is komodia

Supported in JtR 1.7.9-jumbo-8 and above.

Sample PuTTY's private key files

• PuTTY_private_keys.zip

Supported in JtR 1.7.9-jumbo-8 and above. Use Ettercap to get JtR compatible hashes from .pcap files.

Sample PPTP MS-CHAPv2 pcap file(s)

• pptp-caps.zip

Supported in JtR 1.7.9-jumbo-8 and above.

Sample PKCS #12 files

• PKCS-12.zip
• my_keystore.pfx.zip
• xxx.p12.tar

Supported in bleeding jumbo.

• rar5-hp0-password.rar
• rar5-p0-password.rar

'p' mode =⇒ rar a -ma5 rar5-p0-password.rar -p secret.txt

'hp' mode =⇒ rar a -ma5 rar5-hp0-password.rar -hp secret.txt

Supported in JtR 1.7.7-jumbo-6 and above.

Download link for RAR utility: http://www.rarlab.com/download.htm

echo "test" > test.txt
rar a testhp0.rar -hp password test.txt
rar a testp0.rar -p password test.txt
rar a testplain.rar test.txt

• rar_sample_files.tar
• first-file-plain.rar rar2john handles this file correctly after magnum's changes.
• p1-comment.rar RAR files with comments.
• p2-comment.rar RAR files with comments.
• tesuto.rar RAR file containing OEM filenames as well as Unicode filenames
• unicode.rar RAR file with Unicode characters in password. Should crack immediately using single mode if you supply -enc:utf8 too.
• sample rardump created using JtR's rar2john tool
• sample password protected WinRAR SFX files

hp0.rar file is created using rar -hp
p0.rar file is created using rar -p

Supported in JtR 1.7.7-jumbo-6 and above.

Sample SSH private keys (created using ssh-keygen and OpenSSL):

• sample_ssh_private_keys.tar
• large collection of SSH private and public keys
• sample sshdump created using JtR's ssh2john tool

dsa_test_enc.key is a PKCS#8 format key created using OpenSSL. The rest of the key files are generated using ssh-keygen.

Supported by https://github.com/magnumripper/JohnTheRipper/.

Sample new format SSH private keys (created using ssh-keygen):

• openssh-new-format-keys.tar.gz

Supported in JtR 1.7.9-jumbo-8 and above.

• strip.db.gz STRIP database. Password is “openwall”.

• strip-v2.1-openwall_123.db.gz STRIP 2.1 database. Password is “openwall@123”.

Supported in JtR 1.7.9-jumbo-8 and above.

Sample TrueCrypt file(s)

• tc-samples.tar.gz
• truecrypt-examples.7z

Supported in JtR 1.7.9-jumbo-6 and above.

Sample VNC pcap files (contributed by Rich and Dhiru)

• vnc-pcaps.zip
• RealVNC-RFB-3.3-client.zip

Sample VRRP MD5 authentication packet captures

• vrrp-samples.tar.bz2
• vrrp-ah.zip (VRRP packets using Authentication Header)

More samples can be found at https://github.com/kholia/my-pcaps.

There are also good samples in the test directory of aircrack-ng.

• wpa-Induction.tar.gz (WPA2, password “Induction”)
• wpacaps-jim-fixed.tar.bz2 (WPA2, password “password23”)
• wpa-tanoury.tar.bz2 (WPA2)
• wpa.full.cap from aircrack-ng wiki (WPA)
• wpa.bad.passphrase.cap from aircrack-ng wiki (WPA, one bad password is “44445555”)

Note that the “bad auths” can be cracked even though they were not correct for that AP. So we crack what the client thought was the password.

AES-encrypted WinZip archives are supported in JtR 1.7.8-jumbo-2 and above. Note: as currently implemented, false positives may occur (in other words, non-working passwords may be found), typically if the actual passwords are complicated.

Sample ZIP files (created using WinZip and WinRAR):

• zip_sample_files.tar