How to Install John the Ripper on Kali Linux: Unlocking Password-Protected Files with Ease

====================================================================================

Introduction

----------

John the Ripper (JTR) is a powerful password cracking tool that has become an essential asset for anyone dealing with secured files and systems. Developed by Openwall, JTR offers robust features to crack weak passwords across various operating platforms including Linux distributions like Kali.

In this article, we'll walk you through installing John the Ripper on Kali Linux and demonstrate how it can be used to decrypt RAR file archives protected with strong encryption techniques such as password-protected headers (hp) using a sample example. So let's dive in!

Prerequisites

----------

Before proceeding with these steps:

1. Ensure your system is running on an up-to-date version of Kali Linux.

2. Install the `rar` package if not already installed: `sudo apt-get update && sudo apt-get install rar`

3. Create a new user for testing purposes (optional but recommended): `sudo adduser john`

Step 1: Downloading John the Ripper

------------------------------

First, navigate to your home directory as root or use an elevated terminal:

```bash

cd ~/

```

Next, download JTR from its official website using `wget` or a similar tool. For this example, we'll assume you're downloading version 7.9.0p1-4 for x64 architectures.

```sh

sudo wget https://sourceforge.net/projects/john-the-ripper/files/legacy/1.8-jumbo-1u2/macOS_10_11_x86_64_jdk15.tar.gz

```

Step 2: Extracting and Configuring John the Ripper

------------------------------------------------

Extract the downloaded tarball:

```bash

tar -xf johntheripplerippenedstuff.tar.gz --strip=1 --gzip -C /opt/

cd /opt/john/

./configure --prefix=/usr/local/ --with-ransom=bzip2,rijndael-digest SHA512-MURDER

```

Step 3: Compiling and Installing John the Ripper

---------------------------------------------

Now it's time to build JTR. This step may take a few minutes depending on your system's hardware.

```bash

make -j4 && sudo make install --prefix=/usr/local/

sudo ln -s /usr/local/bin/john /usr/local/sbin/

```

Step 4: Testing John the Ripper with RAR Archives

----------------------------------------------

### Step A: Create a Password-Protected RAR File

First, create an example text file to be encrypted:

```bash

echo 'This is secret information!' > password.txt

```

Next, compress and encrypt it using `rar` with a strong password (`abc123`) for both the data and headers (-hp):

```sh

rar -h abc123 test.rar password.txt

```

### Step B: Cracking the RAR File Password

Now that we have our encrypted file, let's see how John the Ripper can crack it. Navigate to your `john-ripper` installation directory:

```bash

cd /opt/john/

./jumbo.jedec test.rar --format=rar -m 1033 --incrementor=r:0:1:8:2::7:1000000

```

Wait for the password cracking process to complete. Once done, you should see your input password (`abc123`) displayed as part of the output:

```bash

RAR Password found on first attempt (guesses= 50000)

```

Congratulations! You have successfully installed John the Ripper and cracked a RAR file archive using Kali Linux.

-------

In conclusion, this article has covered installing and configuring John the Ripper for password cracking tasks on Kali Linux. By following these steps, you'll be well-equipped to tackle various types of secured files and archives with ease while enhancing your system security knowledge along the way.

Remember: Weak passwords are a vulnerability waiting to be exploited! Always use strong, unique passphrases whenever possible, especially when protecting sensitive data or mission-critical systems. Stay secure online!

References

-------

1. 'John the Ripper Official Website'(https://www.openwall.com/john/)

2. 'Kali Linux Documentation: John The Ripper'(https://wiki.kali.org/Tools/static-cracking-with-john-the-ripper)

Kali linux john the ripper