# Lab: John the Ripper

### Step 4: Follow Up

- Instructions:
  - In this section please create a word document containing the answers to the following portions.
  - Include the item number and sub-number with your answers.
  - Include full answers/descriptions. Do not be a minimalist.
  - When ask, or when it supports your answer, include a screen shot. Make sure you explain how your screen shot demonstrates/supports your answer.
  - Make sure you include the name of your lab partner and anyone else you worked with to find these answers.
- Answer:
  1. In the setup we only downloaded one list of words. This was to save time
     1. How would multiple word lists increase the time it takes John to find a password?
     2. How would multiple word lists change the results produced by John? Justify your answer.
  2. Based on your understanding of John, provide three strong passwords, where strong means a password that John would have trouble breaking. Explain why you believe that your passwords are strong.
- Investigate
  1. John's default word list is installed in /usr/share/john and is called password.lst.
     - Look at this file (`leafpad /usr/share/john/password.lst`)
       - Look through this list for any passwords you might have used in the past?
       - Look through this list for specialized words from pop culture items (ncc1701 for Star Trek fans)
       - The note at the top it says this list holds passwords from the mid 1990's
     - Describe what you found
     - What words might you add to this list and why?
  2. Add the following line to a password file

     -     duane:$6$eekriUNBO4EQ0Ei5$G8XCtUZVZ3DeMeXh2D8EXYtNVra.ASI.1mgLcpOL6S6QDMRoPfOMHgq7gnat01dgbDCYuHAJ8RDFtsIvTveCg/:1:1:Duane Chapman, Dog,1-800-BountyHunter,:

     - Try to crack this password with john.
       - Does the result surprise you?
     - Try different versions of Bounty Hunter stored in the GECOS field of the password file.
       - Remember, you will need to remove ~/.john/john.pot each time you successfully crack the password.
       - If you stump john, press the spacebar frequently to see what john is using as guessed passwords.
     - What can you say about how john useses information in the password file?