{"id":46,"date":"2014-10-04T22:03:48","date_gmt":"2014-10-05T03:03:48","guid":{"rendered":"http:\/\/sinjinsmith.net\/?p=46"},"modified":"2017-01-29T17:57:15","modified_gmt":"2017-01-29T23:57:15","slug":"using-john-the-ripper-to-crack-passwords","status":"publish","type":"post","link":"https:\/\/sinjinsmith.net\/?p=46","title":{"rendered":"Using John the Ripper to Crack Passwords"},"content":{"rendered":"<p><strong>It appears the 1607 build of Windows 10 breaks the cracking of passwords with pwdump and samdump2.<\/strong><\/p>\n<p>To crack a Windows 10 Local account password in Kali Linux 2.0 you will need to mount the drive, locate the directory containing the SAM file, dump the password hashes to a file, and then crack with John the Ripper.<\/p>\n<p>Restart the target Windows computer with your KALI Linux 2.0 system.\u00a0 From time to time when you try to access the hard drive containing the Windows partition you may receive an error message related to the Windows hibernation file.\u00a0 To avoid this, shutdown Windows at the command prompt with the command:<\/p>\n<blockquote><p>shutdown \/s \/t 0<\/p><\/blockquote>\n<p>This should prevent the hibernation file problem.\u00a0 Once you are in KALI, open up FILES and select your Windows hard drive to mount it.\u00a0 Open a terminal window and enter the command<\/p>\n<blockquote><p>mount<\/p><\/blockquote>\n<p>to determine the path to your Windows hard drive.\u00a0 Most of the time the Windows hard drive will be the last mount point in the list, normally something like \/dev\/sda1.\u00a0 Your path will be something like \/media\/root\/OSDisk.\u00a0 Browse to your mount point\/Windows\/System32\/config folder.\u00a0 Use the follwoing command to create a dump of the Windows passwords:<\/p>\n<blockquote><p>pwdump SYSTEM SAM &gt; \/root\/Desktop\/SAM2<\/p><\/blockquote>\n<p>Then use John the Ripper to break the passwords.<\/p>\n<blockquote><p>john \/root\/Desktop\/SAM2 &#8211;format=NT<\/p><\/blockquote>\n<p>&nbsp;<\/p>\n<p>For Kali Linux prior to version 2.0<\/p>\n<p>Open terminal<br \/>\nOpen drive in Computer so it will mount<br \/>\nmount to see location of drive<br \/>\nchange to \/Windows\/System32\/config folder in mount point<\/p>\n<p>bkhive SYSTEM \/root\/hive.txt<br \/>\nsamdump2 SAM \/root\/hive.txt &gt; \/root\/hash.txt<\/p>\n<p>john \/root\/hash.txt &#8211;format=nt2<\/p>\n","protected":false},"excerpt":{"rendered":"<p>It appears the 1607 build of Windows 10 breaks the cracking of passwords with pwdump and samdump2. To crack a Windows 10 Local account password in Kali Linux 2.0 you will need to mount the drive, locate the directory containing the SAM file, dump the password hashes to a file, and then crack with John [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,9],"tags":[],"class_list":["post-46","post","type-post","status-publish","format-standard","hentry","category-linux","category-security"],"_links":{"self":[{"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=\/wp\/v2\/posts\/46","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=46"}],"version-history":[{"count":5,"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=\/wp\/v2\/posts\/46\/revisions"}],"predecessor-version":[{"id":119,"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=\/wp\/v2\/posts\/46\/revisions\/119"}],"wp:attachment":[{"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=46"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=46"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=46"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}