John the Ripper Help

[hijiz]

Hi, a while ago i started doubting the security of myself, so i decided to test the security i would try hacking it myself and i installed john the ripper. however whenever i try doing anything with it i get the this mesage.
Password files required, but none specified
how do i get the password files.
sorry for being such a noob.

[bodhi.zazen]

http://www.cyberciti.biz/faq/unix-linux-password-cracking-john-the-ripper/

[hijiz]

ithought this command would help me

sudo /usr/sbin/unshadow /etc/passwd /etc/shadow > /tmp/crack.password.db
But when i type it nothing happens. am i doing something wrong?

[sisco311]

Does `John the Ripper' support sha512?

[hijiz]

i dont know.
How should I?

[sisco311]

i dont know.
How should I?

You read its documentation.

But I have a better question, why do you think that using `joe' will increase your system's security?

[hijiz]

I wanna see how secure my system is and how prone it is to attaks.
can we get back on topic here.

[sisco311]

Start here: http://ubuntuforums.org/showthread.php?t=510812

Use strong passwords & don't run commnds/executables which you don't understand and/or trust.

[hijiz]

Im not asking how to make my system more secure. i want to know how secure it is right now.

[hijiz]

After searching in google i find nothing to prove that john supports sha512. does anyone know if it is or not? and also back to the main topic how do i make it work.

[hijiz]

I searched a bit more it seems it doesnt support sha512 apparently i need a patch called Jumbo2 how can i install this patch?

[bodhi.zazen]

I thought john was patched in Ubuntu, at least there was a bug report on Launchpad, although I have not tried it recently.

Google search and you will find what you need.

https://bugs.launchpad.net/ubuntu/+source/john/+bug/586544

[cariboo]

According to th bug report, the fix was committed, but never released, maybe the op should give the devs a nudge to get some action. :)

[nixor01]

yes it does support sha512.