q2K BHP
Black History Portal
THE BHP WIRE —
HIDDEN TRUTHS
What's New!
THE JOURNEY THROUGH TIME

Explore Black History

Explore the people, places, events, achievements, struggles and stories that shaped our journey.

✊🏾

Civil Rights

Movements, leaders, victories and the continuing fight for equality.

⚙️

Black Inventors

Innovation, patents, science, technology and world-changing contributions.

🏆

Sports

Pioneers, champions, Negro Leagues, records, activism and excellence.

♟️

People

Meet the people whose lives, choices and achievements shaped the journey.

📍

Places

Black towns, communities, institutions and places where history happened.

📜

Events

Moments that changed communities, movements, institutions and the nation.

Enter a person, place, event, or topic.
MY'STORY

The MOVE Fire

This is a personal recollection on the Move fire on May 13, 1985 Philadelphia police fired thousands of rounds at the MOVE house, city officials approved dropping an explosive device on the roof, the resulting fire was allowed to burn, 11 people—including five children—died, and 61 homes were destroyed. Philadelphia City Council later called it a “brutal attack carried out by the City of Philadelphia on its own citizens” and acknowledged that no individual faced criminal consequences for the bombing. One timeline correction worth preserving for the BHP record: the major previous MOVE-police confrontation was August 8, 1978, about seven years before the bombing, not a year or two earlier. Officer James Ramp was killed, other police and firefighters were wounded, nine MOVE members were later convicted, and television cameras recorded police beating Delbert Africa during his arrest. The 1985 MOVE Commission later specifically criticized city planners for failing to adequately use lessons from that 1978 confrontation. And that actually strengthens the point you’re making: 1985 did not happen without precedent or institutional memory. There had already been a deadly confrontation with MOVE, years of conflict, negotiations and police involvement before Osage Avenue.

MORE →
BLACK FACTS
The Truths They Never Taught You...

Ruler of the Mali Empire in the 14th century

Mansa Musa was the ruler of the Mali Empire in West Africa. Details recorded here should be sourced; unknown information is left blank.

MORE →
BHP gathered finds from its connected research sources. Showing the 4 strongest Black History matches.
← BACK TO RESULTS
Wikipedia

John the Ripper

John the Ripper
DeveloperOpenWall
Release1996[1]
Stable release
1.9.0[2] / May 14, 2019 (2019-05-14)
Operating systemCross-platform
TypePassword cracking
LicenseGNU General Public License
Proprietary (Pro version)
Websitewww.openwall.com/john/ Edit this at Wikidata
Repository

John the Ripper is a free password cracking software tool.[3] Originally developed for the Unix operating system, it can run on fifteen different platforms (eleven of which are architecture-specific versions of Unix, DOS, Win32, BeOS, and OpenVMS). It is among the most frequently used password testing and breaking programs[4] as it combines a number of password crackers into one package, automatically detects password hash types, and includes a customizable cracker. It can be run against various encrypted password formats including several crypt password hash types most commonly found on various Unix versions (based on DES, MD5, or Blowfish), Kerberos AFS, and Windows NT/2000/XP/2003 LM hash. Additional modules have extended its ability to include MD4-based password hashes and passwords stored in LDAP, MySQL, and others.[5]

Sample output

[edit]

Here is a sample output in a Debian environment.

$ cat pass.txt
user:AZl.zWwxIh15Q
$ john -w:password.lst pass.txt
Loaded 1 password hash (Traditional DES [24/32 4K])
example         (user)
guesses: 1  time: 0:00:00:00 100%  c/s: 752  trying: 12345 - sandwich

The first line is a command to expand the data stored in the file "pass.txt". The next line is the contents of the file, i.e. the user (AZl) and the hash associated with that user (zWwxIh15Q). The third line is the command for running John the Ripper utilizing the "-w" flag. "password.lst" is the name of a text file full of words the program will use against the hash, pass.txt makes another appearance as the file we want John to work on.

Then we see output from John working. Loaded 1 password hash — the one we saw with the "cat" command — and the type of hash John thinks it is (Traditional DES). We also see that the attempt required one guess at a time of 0 with a 100% guess rate.

Attack types

[edit]

One of the modes John can use is the dictionary attack.[6] It takes text string samples (usually from a file, called a wordlist, containing words found in a dictionary or real passwords cracked before), encrypting it in the same format as the password being examined (including both the encryption algorithm and key), and comparing the output to the encrypted string. It can also perform a variety of alterations to the dictionary words and try these. Many of these alterations are also used in John's single attack mode, which modifies an associated plaintext (such as a username with an encrypted password) and checks the variations against the hashes.

John also offers a brute force mode, dubbed "incremental mode".[6] In this type of attack, the program goes through all the possible plaintexts, hashing each one and then comparing it to the input hash. John uses character frequency tables to try plaintexts containing more frequently used characters first. This method is useful for cracking passwords that do not appear in dictionary wordlists, but it takes a long time to run.

In addition to wordlist mode and incremental mode, there is :

  • Markov mode — uses research by Arvind Narayanan and Vitaly Shmatikov[7][8][9] to create candidates
  • Mask mode — uses a user-supplied pattern to create candidates
  • "Single crack" mode — uses details like the user's login name, full name, home directory name, et al. as candidates
  • Subsets mode — generates candidates based on complexity, prioritising longer simple passwords over shorter complex ones
  • Regex mode — an experimental mode that uses a user-supplied regular expression, similar to the aforementioned mask mode, to create candidates
  • Mode stacking — utilises the mask or regex modes in combination with another mode

See also

[edit]

References

[edit]
  1. ^ "john-users – Re: When was John created?". Archived from the original on 2021-10-28. Retrieved 2021-10-28.
  2. ^ "Announce - [openwall-announce] John the Ripper 1.9.0-jumbo-1". Archived from the original on 2020-11-08. Retrieved 2019-06-04.
  3. ^ Anonymous (2001). Maximum Linux Security (2 ed.). Sams Publishing. p. 154. ISBN 0-672-32134-3.
  4. ^ "Password Crackers". Concise Cybersecurity. Archived from the original on 2017-04-04. Retrieved 2016-12-03.
  5. ^ "John the Ripper". sectools.org. Archived from the original on 2019-03-15. Retrieved 2016-03-06.
  6. ^ a b "john/doc/MODES at bleeding-jumbo · openwall/john". GitHub. Retrieved 2024-10-30.
  7. ^ "john/doc/MARKOV at bleeding-jumbo · openwall/john". GitHub. Retrieved 2024-10-30.
  8. ^ Narayanan, A.; Shmatikov, V. (2005), Fast Dictionary Attacks on Passwords Using Time-Space Tradeoff, retrieved 30 October 2024
  9. ^ Narayanan, Arvind; Shmatikov, Vitaly (2005-11-07). "Fast dictionary attacks on passwords using time-space tradeoff". Proceedings of the 12th ACM conference on Computer and communications security. ACM. pp. 364–372. doi:10.1145/1102120.1102168. ISBN 978-1-59593-226-6.
[edit]

Source: Wikipedia. Article content is retrieved live through the MediaWiki API.

No preview image
Wikipedia

Password cracking

In cryptanalysis and computer security, password cracking is the process of guessing passwords protecting a computer system. A common approach (brute-force attack) is to repeatedly try guesses for the password and to check them against an available cryptographic hash of the password. Another type of approach is password spraying, which is often automated and occurs slowly over time to remain undetected, using a list of common passwords. The purpose of password cracking might be to help a user recover a forgotten password (since installing an entirely new password would involve System Administration privileges), to gain unauthorized access to a system, or to act as a preventive measure whereby system administrators check for easily crackable passwords. On a file-by-file basis, password cracking is utilized to gain access to digital evidence to which a judge has allowed access when a particular file's permissions are restricted. Brute-force password guessing attacks against online systems are usually ineffective because systems are designed to lock accounts after a certain number of unsuccessful login attempts. Obtaining the cryptographic hash of the password makes it possible to perform an unlimited number of offline guesses. Hash files might be obtained by third parties by court-ordered access, or as part of an illegal data breach. If passwords are reused across websites, the hash file obtained from one website can be used for cracking, and then the discovered passwords can be attempted against the same email addresses on other websites. The password spraying approach evades account lockout countermeasures by guessing the same password across many accounts, allowing time to pass between attempts on the same account, which might include legitimate logins. This approach does not target specific accounts.

MORE →
No preview image
Wikipedia

Cracking

Cracking may refer to: Cracking, the formation of a fracture or partial fracture in a solid material studied as fracture mechanics Performing a sternotomy Fluid catalytic cracking, a catalytic process widely used in oil refineries for cracking large hydrocarbon molecules into smaller molecules Cracking (chemistry), the decomposition of complex organic molecules into smaller ones Cracking joints, the practice of manipulating one's bone joints to make a sharp sound Cracking codes, see cryptanalysis Whip cracking Safe cracking Crackin', band featuring Lester Abrams Packing and cracking, a method of creating voting districts to give a political party an advantage In computing: Another name for security hacking; the practice of defeating computer security. Password cracking, the process of discovering the plaintext of an encrypted computer password. Software cracking, the defeating of software copy protection.

MORE →
No preview image
Wikipedia

Crack (password software)

Crack is a Unix password cracking program designed to allow system administrators to locate users who may have weak passwords vulnerable to a dictionary attack. Crack was the first standalone password cracker for Unix systems and the first to introduce programmable dictionary generation as well. Crack began in 1990 when Alec Muffett, a Unix system administrator at the University of Wales Aberystwyth, was trying to improve Dan Farmer's pwc cracker in COPS. Muffett found that by re-engineering the memory management, he got a noticeable performance increase. This led to a total rewrite which became Crack v2.0 and further development to improve usability.

MORE →
No preview image
Wikipedia

John the Ripper

John the Ripper is a free password cracking software tool. Originally developed for the Unix operating system, it can run on fifteen different platforms (eleven of which are architecture-specific versions of Unix, DOS, Win32, BeOS, and OpenVMS). It is among the most frequently used password testing and breaking programs as it combines a number of password crackers into one package, automatically detects password hash types, and includes a customizable cracker. It can be run against various encrypted password formats including several crypt password hash types most commonly found on various Unix versions (based on DES, MD5, or Blowfish), Kerberos AFS, and Windows NT/2000/XP/2003 LM hash. Additional modules have extended its ability to include MD4-based password hashes and passwords stored in LDAP, MySQL, and others.

MORE →
TOPIC OF THE DAY

Greenwood / Black Wall Street

Before the 1921 destruction of Tulsa’s Greenwood District, Black residents had created a remarkable center of business and community life. The district included stores, professional offices, entertainment venues and homes owned by Black citizens. Understanding Greenwood means learning what was built—not only what was burned.

MORE →
TRIVIA QUESTION OF THE DAY

Which Supreme Court case ruled state-sponsored public-school segregation unconstitutional?

Brown v. Board of Education in 1954.