john

Crack password hashes offline using CPU resources and multiple attack modes.

15|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/AeonDave/malskill --skill john
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: john
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/cracking/john
Command: npx skills add https://github.com/AeonDave/malskill --skill john

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the need to crack password hashes offline when CPU resources are available, supporting a wide array of hash formats and various cracking methodologies.

Core Features & Use Cases

  • Hash Cracking: Supports hundreds of hash formats for offline password recovery.
  • Cracking Modes: Offers wordlist, rules-based, single, and incremental (brute-force) modes.
  • Use Case: Recovering forgotten passwords from captured NTLM hashes using a dictionary attack with mangling rules.

Quick Start

Use the john skill to crack hashes.txt using the rockyou.txt wordlist.

Frequently Asked Questions about john

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I crack password hashes offline using a wordlist?

To crack password hashes offline, you use a CPU-based cracker to apply a wordlist against a target hash file. This skill enables offline password recovery by running dictionary attacks with mangling rules to test candidate passwords against captured hashes.

What hash formats are supported for offline password recovery?

Offline password recovery supports hundreds of hash formats for cracking. The tool processes various captured hash types, allowing you to target multiple formats from a single hash file during your dictionary or brute-force attacks.

What is the difference between dictionary attacks and incremental brute-force cracking?

Dictionary attacks test passwords from a provided wordlist, while incremental brute-force cracking generates all possible combinations. This skill supports both methods, alongside single-mode and rule-based mangling, to recover passwords offline.

Can I recover NTLM hashes with a CPU password cracker?

Yes, you can recover forgotten passwords from captured NTLM hashes using a CPU password cracker. By applying a dictionary attack with mangling rules against the NTLM hash file, the tool systematically tests and recovers the plaintext credentials.

Do I need a wordlist to perform offline hash cracking?

Yes, you need hash files and wordlists for effective offline hash cracking. While incremental brute-force mode generates combinations without a wordlist, dictionary and rule-based attacks require a supplied wordlist like rockyou.txt to operate efficiently.