John the Ripper cracks password hashes. Quick guide for beginners:
## Installation
“`bash
sudo apt install john
“`
## Step 1: Get the Hash
Extract hash from shadow file or captured handshake.
## Step 2: Identify Hash Type
“`bash
john –list=formats | grep md5
“`
Common types: MD5, SHA256, NT, bcrypt
## Step 3: Crack It
### Dictionary Attack
“`bash
john –wordlist=/usr/share/wordlists/rockyou.txt hash.txt
“`
### Specify Format
“`bash
john –format=raw-md5 –wordlist=rockyou.txt hash.txt
“`
### Show Results
“`bash
john –show hash.txt
“`
## Wordlists
– /usr/share/wordlists/rockyou.txt – Most common
– SecLists repository – Comprehensive
## Common Errors
– No password hashes loaded: Check –format flag
– Unknown hash type: Use hashid to identify first
– Too slow: Try smaller wordlist
Legal: Only crack passwords you own or have permission to test!
