magnumripper/JohnTheRipper
JohnTheRipper
JohnTheRipper is a multi-platform offline password recovery tool designed to detect and crack hundreds of different hash and cipher formats across various operating systems. It functions as a security utility for retrieving lost credentials and performing security audit testing to identify weak passwords within a database of hashes.
The project features a custom rule password cracker and a mangling engine that uses a domain-specific language to transform wordlist entries into common password mutation patterns. It provides hardware-accelerated recovery by distributing parallel processing tasks across CPUs, GPUs, and FPGAs.
The software includes multi-format hash support through a modular plugin system and utilizes multi-threaded workload distribution to increase recovery speed. It also provides session management capabilities to serialize search progress and resume interrupted recovery sessions.
Features
- Password Hash Recovery - Provides high-performance offline retrieval of plain-text passwords from cryptographic hashes and ciphers.
- Rule-Based Password Crackers - Features a specialized recovery tool with a built-in compiler for defining mangling rules for wordlists.
- Hardware Accelerated Cracking - Leverages GPUs and FPGAs to massively accelerate the process of guessing passwords through parallel processing.
- Plugged Hash Formats - Features a modular plugin system that allows the tool to support and detect hundreds of different hash and cipher formats.
- Multi-Platform Hash Analysis - Detects and processes a wide variety of hash formats across different operating systems and encrypted file types.
- Custom Mangling Rules - Allows the creation of specialized mangling rules and recovery logic to target passwords based on known user behavior.
- GPU Accelerated Recovery - Distributes parallel processing tasks across CPUs, GPUs, and FPGAs to maximize password recovery speed.
- Hash Cracking Tools - Acts as a comprehensive security utility for detecting and cracking hundreds of hash and cipher formats.
- Mangling Attack Generators - Processes hashes and ciphers using wordlists and custom mangling rules to identify weak credentials.
- Password - Ships a mangling engine that uses a custom language to transform wordlist entries into mutation patterns.
- Parallel Workload Distribution - Divides the candidate search space into discrete chunks to be processed in parallel across available CPU cores.
- Domain Specific Languages - Implements a domain-specific language for defining custom cracking rules and password mutation patterns.
- Parallel Processing - Increases recovery speed by distributing parallel processing tasks across multiple CPU cores, GPUs, and FPGAs.
- State Persistence - Periodically serializes search progress and candidate indices to disk to allow resuming interrupted recovery sessions.
- Security Testing and Auditing - Enables security audits to identify weak passwords within a hash database to ensure credential policy compliance.
- Hardware Abstraction Layers - Provides a unified interface to execute cracking logic across heterogeneous compute hardware including CPUs, GPUs, and FPGAs.
- Brute Force Tools - Community-enhanced password cracking suite.
- Password Attacks - High-speed utility for cracking various password hashes.
