In this lecture, we are going to see how we can hack office passwords with John.
We will be able to recover word, Excel and PowerPoint passwords with this method.
Don Draper is one of the most popular password cracking tools available in most penetration testing,
dining distributions like Kleenex, better tools, or SECTRA.
This tool has a user friendly command interface and the ability to detect most password types.
This lesson will dive deep into John Draper, show you how it works.
Explain why you need it for security testing.
No, the concept of the tag is very simple.
We are going to get the hash from this file and then we are going to use John to crack this hash.
So you must have a Linux store in VMware or a virtual box.
First of all, prepare a password protected word file.
You can create a word file in windows.
Go to your options and give it a password.
No.
Transfer the file from windows machine to the machine.
You can directly copy files to VMware or you can also use a USB due to copy the file.
You'll get the hash of the document with the following command in the terminal.
Here, correct me is the password protected file and hashed or text is a text file that will contain
our hash that is required to be correct.
Craig the password with the following command.
John urge to don't text here has to do text.
File is the file that contains our hash for the document file.
No, John will start cracking the password by default.
It will first try with a single code attack.
It will check the combination of file names for passwords.
Then it will go for the default dictionary and then it will start forcing the password.
Once the password is cracked, it will be displayed on screen.
You can also check the correct password show parameter which on command.
The drone is a very powerful tool and it has some additional attacks.
For example, run John Foster and use it with multiple processes.
We can use a fog flag, for example.
I'm using 434 is equal to three, tells John.
The three processes must be created for the password, which is very useful in multicore processes.
Proposed the dawn in traditionally attack with inbuilt dictionary.
You can give the flag the W.
If you want to use the judiciary, you need to prepare your judiciary file first and compress it with
the given commands.
Then you can use the rock.
You got text dictionary with the joint command.
This is another very powerful attack called mosque attack.
If you know the number of digits or type of bars where you can use the mosque attack to give a mosque,
you can use the flag.
John.
Mark, and give us what example this question mark the and question mark and question mark, which means
that we have a three digit password.
For some reasons.
If you want to clear the John Cash to remove your password, you can remove the John Doe file.
Well, let's see how it actually works.
First of all, create a microsoft Word document.
Write some content in it.
Save it on desktop.
Go to tools.
Unit options.
And give it a pass.
I'm going to give it a pass for the one, two, three, four, five, six.
And click Save.
Now I want to create another file so that we may try different attacks against these files.
Now again, save the file, give it a name, drag me to the text and give it a password of one, two,
three.
No.
You have two files on your desktop.
This copy.
These two files.
And move them to the collie box.
You must ensure that you place them in the home directory.
Open the terminal.
And you can see with the command that our files are visible.
They use the command office to Don Craig X into text.
And we are going to convert the second file as well.
No.
We have hash files for both these files.
No.
Let's see the drone before the.
Just give the command, John, as to text and press enter and it will automatically start cracking the
password.
You can see that Dawn first single core attack.
And then use the inventory with which it was able to create the password.
And our password, 1 to 3 is shown on the screen.
To seek the correct passwords.
You can give the command, John, with your flag.
No.
Let's see how we can run multiple processes of John to speed up the cracking process.
Just give the command.
John has two techs with four flags set to three and we get an error as we have already cracked the password.
So it is giving an error that there is no password hashes left to correct.
Now let's clear John cache.
Just find your own file in calling machine with fine command.
Then use the remote command to delete it.
Well, you can use the dawn with full flag again.
No, you can say that it has created three different processes to correct the password.
In this manner, our tracking process will be much faster and we will be able to collect password easily
in small amount of time.
No.
Let's see how we can force John to use the attack first.
Just give the W flag to John.
Then the john will try the dictionary to tag the password.
You can see that it has found the password with the revolutionary.
You can use the show flag to see the password again.
Now let's see how we can use this equation.
First of all, look at the dictionary.
And then uncompressed it with the gunship command, displays the complete link with the command and
would automatically uncompressed it.
They use the dawn with the blue flag while giving the full part of what traditionally.
Then you can see that it was able to create a path for a visionary.
No.
Let's see.
The last attack.
The mosque attack.
Now we know that the password had be years.
You can give the mask of three digits.
Question mark.
The question mark the end.
Question mark the.
And under command.
Pentagon will try to brute force the password.
As for the given masks.
If you press, you will be able to see the progress.
So you can see that our password has been correct.
To see the correct password again, you can use the show flag again.
So in this lecture, we saw different methods to crack office passwords with John Poole.
I hope you like this lecture and see you in the next lecture.