Tutorials maintained on this wiki:

• How to build on Ubuntu Linux (basic to intermediate)
• How to build on/for Win64 (basic to intermediate)
• Cracking/auditing user passwords on recent Ubuntu, Fedora, and some Solaris 10+ (SHA-crypt) (basic to intermediate)
• How to retrieve and audit password hashes from remote Linux servers (intermediate)
• Cracking WPA-PSK/WPA2-PSK with John the Ripper (intermediate)
• Procedure to add a new code-page to john (advanced development - should move out of tutorials!)
• OpenCL BitLocker tutorial

External links (English):

• Comprehensive Guide to John the Ripper (in 7 parts so far) (basic to advanced)
• Password cracking with John the Ripper on Linux using distro-provided packages (basic)
• Cracking Tezos ICO passwords on Windows 10 (basic to intermediate; detailed step by step with pictures)
• Cracking Tezos ICO passwords on macOS, OSX, Apple (basic to intermediate; detailed step by step with pictures)
• JtR Active Directory Password Auditing / NTDS.dit extraction (by Rich Rumble) (basic to intermediate)
• Password Cracking Class for Hackers For Charity - video of 3 talks on password cracking history and modern techniques (download links), a JtR usage tutorial is talk 2 starting at ~7000 seconds or ~1:56:40 (basic to intermediate)
• There are many video tutorials/demos for specific uses of JtR on YouTube (mostly basic stuff)
• How to quickly crack NTLM hashes given cracked LM hashes (intermediate)
• Building and using John the Ripper with OpenMP support (to use multiple CPU cores) (basic)
• Step-by-Step Clustering JtR with MPI on Kali Linux (by Luis Rocha) (basic)
• JtR Cheat Sheet (by Luis Rocha) (basic)
• Building and using John the Ripper with MPI support (to use multiple CPU cores, maybe across multiple machines), also adding a custom hash type based on MD5 and SHA-1 (intermediate to advanced)
• A generic tutorial rehashing much of the official documentation (mostly basic). This one has numerous factual errors, yet it is representative of what many JtR tutorials look like, and all of them contain factual errors, unfortunately (please feel free to submit a better one or to write one right on this wiki).
• Downloading and building JtR with the jumbo patch on Linux (intermediate)
• Running the official build of JtR 1.7.0.1 under Windows to crack sample passwords (basic)
• Cracking Mac OS X salted SHA-1 passwords (by Patrick Dunstan) (intermediate, comments)
• Making an advanced build of JtR with patches on Mac OS X Snow Leopard (by Matt Weir) (comments)
• How-to: John the Ripper on a Ubuntu 10.04 MPI Cluster (by Pétur Ingi), also available as a PDF file (intermediate)
• Parallelizing JtR across multiple CPU cores using MPI on a Red Hat'ish Linux system (by Hamid Kashfi) (intermediate)
• Using Wireshark and John to crack LEAP (advanced, skips the patching step)
• Dumping the user's password hash on Mac OS X 10.5 via the ARDAgent vulnerability, cracking the hash (intermediate). The specific download URL for a JtR build is outdated, use a more recent version/build instead.
• Automatically generating wordlist mangling rules (advanced)
• Why we need strong p4ssw0rds: a blog post about password cracking and John the Ripper (basic to intermediate; an example unnecessarily uses the “external mode” where a simpler wordlist rule would do)
• Supercharged John the Ripper Techniques by Rick Redman of KoreLogic (PDF file with slides; basic to intermediate)
• Downloading and cracking RACF hashes (basic)

External links (non-English):

• Portuguese tutorial on compiling and using JtR 1.7 under Linux (basic, split over 8 web pages)
• Spanish blog posts on using JtR under Ubuntu - parts 1, 2, 3 (basic to intermediate)
• Icelandic version of Pétur Ingi's JtR/Ubuntu/MPI how-to, PDF file (intermediate)
• Russian version of the JtR/Ubuntu/MPI how-to, web page with reader comments (intermediate)

I think that this wiki page/section should contain primarily simple stuff aimed at typical end-users. I envision these tutorials as step-by-step guides or examples for specific use cases - e.g., auditing passwords on a Windows system (that's one tutorial), then auditing passwords from various Unix-like systems and Windows on a Linux system (that's another tutorial). And I do mean step-by-step - e.g., start with downloading JtR, compiling it (if applicable), downloading pwdump6 and running it on a Windows system with output to a file, scp'ing the file, and so on… More specific and with greater detail than that found in the official documentation for JtR. Some overlap with the official documentation (such as with doc/EXAMPLES) and between multiple tutorials is no problem. Right now, this page mostly links to external websites, which is OK, but I would actually prefer that tutorials be written right on this wiki, with new pages created under this “tutorials” DokuWiki namespace. - solar

Back to John the Ripper user community resources.