Cracks password hashes offline using John the Ripper dictionary, rule, and mask attacks.
npx skills add https://github.com/wgpsec/AboutSecurity --skill john-crack
Please help me install this Agent Skill. Skill: john-crack Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/tool/john-crack Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill john-crack
During penetration tests and password audits, captured hashes (NTLM, Kerberos, ZIP, PDF, SSH keys) must be converted back into plaintext passwords to demonstrate risk or regain access. This Skill provides a complete John the Ripper workflow for offline hash cracking without manual trial-and-error.
john --format=NT --wordlist=rockyou.txt ntlm.txt to recover plaintext credentials for lateral movement.Use the john-crack skill to crack the NTLM hashes in my hashes.txt file with the rockyou.txt wordlist.
High-intent search queries and answers about installing and using this skill.
Crack NTLM hashes by running john --format=NT --wordlist=rockyou.txt ntlm.txt. Add --rules=best64 to mutate dictionary candidates, and use john --show ntlm.txt to display recovered passwords.
Extract the hash first with zip2john secret.zip > zip_hash.txt, then run john zip_hash.txt or add a wordlist with --wordlist=rockyou.txt. The same pattern works for RAR, PDF, Office, and SSH keys using rar2john, pdf2john.pl, office2john, and ssh2john.
John the Ripper auto-detects hash types and ships with the *2john extraction toolchain, making it convenient for mixed formats. John also supports Hashcat-style mask attacks via --mask, so both tools cover dictionary, rule, and brute-force modes.
Yes, John cracks Kerberoasting output with --format=krb5tgs and AS-REP roasting hashes with --format=krb5asrep. Supply a wordlist such as rockyou.txt and optionally enable rule mutation for better coverage.
Resume an interrupted session with john --restore, and check progress anytime with john --status. Naming sessions with --session=my_crack lets you manage multiple concurrent cracking jobs.
ZurybrExtract and crack password hashes from encrypted 7z archives.
blacklanternsecurityAutomates PetitPotam, PrinterBug and DFSCoerce authentication coercion attacks with NTLM/Kerberos relay to SMB, LDAP, AD CS targets.
starwreckntxCrack password hashes using brute-force, dictionary, and rainbow-table attacks.
wp-mediaReview grooming specs and output MoSCoW-classified verdicts.