The new “features” this time are primarily performance improvements possible due to the use of better algorithms (bringing more inherent parallelism of trying multiple candidate passwords down to processor instruction level), better optimised code, and new hardware capabilities (such as AltiVec available on PowerPC G4 and G5 processors).
In particular, John the Ripper 1.7 is a lot faster at Windows LM hashes than version 1.6 used to be. (Since JtR is primarily a Unix password cracker, optimizing the Windows LM hash support was not a priority and hence it was not done in time for the 1.6 release.) John’s “raw” performance at LM hashes is now similar to or slightly better than that of commercial Windows password crackers such as LC5 – and that’s despite John trying candidate passwords in a more sophisticated order based on statistical information (resulting in typical passwords getting cracked earlier).
John the Ripper 1.7 also improves on the use of MMX on x86 and starts to use AltiVec on PowerPC processors when cracking DES-based hashes (that is, both Unix crypt(3) and Windows LM hashes). To my knowledge, John 1.7 (or rather, one of the development snapshots leading to this release) is the first program to cross the 1 million Unix crypts per second (c/s) boundary on a general-purpose CPU. Currently, John 1.7 achieves up to 1.6M c/s raw performance (that is, with no matching salts) on a PowerPC G5 at 2.7 GHz (or 1.1M c/s on a 1.8 GHz) and touches 1M c/s on the fastest AMD CPUs currently available. Intel P4s reach up to 800k c/s. (A non-public development version making use of SSE also reaches 1M c/s on an Intel P4 at 3.4 and 3.6 GHz. I intend to include that code into a post-1.7 version.)
Additionally, John 1.7 makes an attempt at generic vectorization support for bitslice DES (would anyone try to set DES_BS_VECTOR high and compile this on a real vector computer, with compiler vectorizations enabled?), will do two MD5 hashes at a time on RISC architectures (with mixed instructions, allowing more instructions to be issued each cycle), and includes some Blowfish x86 assembly code optimizations for older x86 processors (the Pentium Pro family, up to and including Pentium 3) with no impact on newer ones due to runtime CPU type detection.
Speaking of the actual features, John 1.7 adds an event logging framework (John will now log how it proceeds through stages of each of its cracking modes – word mangling rules being tried, etc.), better idle priority emulation with POSIX scheduling calls (once enabled, this almost eliminates any impact John has on performance of other applications on the system), system-wide installation support for use by *BSD ports and Linux distributions, and support for AIX, DU/Tru64 C2, and HP-UX tcb files in the “unshadow” utility.
Finally, there are plenty of added pre-configured make targets with optimal settings, including ones for popular platforms such as Linux/x86-64, Linux/PowerPC (including ppc64 and AltiVec), Mac OS X (PowerPC and x86), Solaris/sparc64, OpenBSD on almost anything 32-bit and 64-bit, and more.
Of course, all platforms supported by John 1.6 (including plain x86 running most Unix-like systems, Win32, or DOS) are still supported. Similarly, pre-compiled binary distributions of John 1.7 for Win32 and DOS are made available.
Source: Security Focus
naveed says
from where do i download john the ripper ?
regards,
naveed
[email protected]
Hellboy says
Naveed u can get it from here
http://www.openwall.com/john/
naveed says
i did download john the ripper john171w.zip but i don’t understand
about parameter although i was writing correct but each time it was giving me an error, can you provide me link to download bruteforcer
or email cracker for yahoo ?
regards,
naveed
rudra says
from where i can get john ripper 1.7. inform.
Gouki says
*Gouki looks up 2 comments*
http://www.openwall.com/john/
henrik says
is there any programmes to look at social security database’s or dhss databases?
shashi says
very good utility
Adubs says
now how the fuck do u use this
Darknet says
Adubs: You are required to engage your brain and RTFM :)
ALI KHAYRI says
Speaking of the actual features, John 1.7 adds an event logging framework (John will now log how it proceeds through stages of each of its cracking modes – word mangling rules being tried, etc.), better idle priority emulation with POSIX scheduling calls (once enabled, this almost eliminates any impact John has on performance of other applications on the system), system-wide installation support for use by *BSD ports and Linux distributions, and support for AIX, DU/Tru64 C2, and HP-UX tcb files in the “unshadow” utility.
Stephanie says
For anyone interested, there is a diff file to add support to John the Ripper for Tiger’s (Mac OS X 10.4) salted SHA1 hashes.
http://fsbsoftware.com/john-1.7-saltsha1.diff
And some precompiled versions of JtR for Mac OS X are available here (not including the Tiger salted SHA1 diff):
http://www.macunix.net/JTR/
deleo says
how can i learn to use jtr
zac says
the problem is that all the damn tutorials you find on the net tell you to type “john -x xxxx.xxx” etc but the error returned is that there is no executable named “john”. If all you needed was TFM then there would be no tutorials. The older 1.6 versions include the “john” executable and will work with all the tutorials you find on the net.
good luck though. I’ve been using jtr with the CCbill exploiter and have not found a single working pass yet. yay?!?!?……
rana says
can any one tell me how to use john ripper transparently
hix says
can JTR crack friendster passwords?
albino says
i read the instructions btu im not computer savvi enough to understand how do u install and run
centaspike says
do your research….
and use your common sense if you cant get things working.
/cvntyness
N-ZeX says
zac,
actually, it’s not “john”, it’s “john-mmx”. i dont know why they messed-up “john” with “john-mmx”
also, can JTR get passwords from yahoo mail and friendster? if not, does anybody know how i can get the hashed passwords of a certain yahoo user? all i have is their e-mail address…