4 ms·

So what's the difference between hashcat and johntheripper? Any reason to use one over the other?

by umvi 6y ago

tristor 6y ago
Hashcat has massively better scalability and support for GPU acceleration
SloopJon 6y ago
I had to check to see whether John the Ripper is still maintained. As a matter of fact, 1.9.0 was released last year, four years after 1.8.0: https://www.openwall.com/lists/announce/2019/05/14/1 https://www.openwall.com/lists/announce/2019/05/14/1 The release notes mention that CUDA support was dropped, but that 88 formats out of 407 have OpenCL support. A few formats also have support for the ZTEX 1.15y, a now-discontinued FPGA-based board popular for crypto mining, which is something I don't think Hashcat has. Here's an article I found on that topic: https://medium.com/@ScatteredSecrets/bcrypt-password-cracking-extremely-slow-not-if-you-are-using-hundreds-of-fpgas-7ae42e3272f6 https://medium.com/@ScatteredSecrets/bcrypt-password-crackin... Edit: the two HN submissions for JtR 1.9.0 got no comments, but this Slashdot post does have some comments from a maintainer: https://it.slashdot.org/story/19/05/18/1841245/new-john-the-ripper-cracks-passwords-on-fpgas https://it.slashdot.org/story/19/05/18/1841245/new-john-the-...
gen3 6y ago
I’ve used johntheripper for wordlists and hashcat for brute-forcing, but the ethos might have changed.
- Bnshsysjab 6y ago
  Hashcat supports wordlists with large rule sets, search ‘best64 ruleset’ for instance
  - gen3 6y ago
    Awesome, thank you!
Bnshsysjab 6y ago
Hashcat has far better performance, unsure if jtr supports ‘rules’ (eg add ‘1!’ Suffix to each word - bashcat has many rules like this). Hashcat is a pita for quick jobs so JTR is better if you’re teaching a class of unequipped students. I’ve never had hashcat work out of the box at all, either driver issues or it exits because it overheats my GFX. When it is running it is very, very good though.

So what's the difference between hashcat and johntheripper? Any reason to use one over the other?

by umvi 6y ago

So what's the difference between hashcat and johntheripper? Any reason to use one over the other?

tristor 6y ago

Hashcat has massively better scalability and support for GPU acceleration

SloopJon 6y ago

I had to check to see whether John the Ripper is still maintained. As a matter of fact, 1.9.0 was released last year, four years after 1.8.0: https://www.openwall.com/lists/announce/2019/05/14/1 https://www.openwall.com/lists/announce/2019/05/14/1 The release notes mention that CUDA support was dropped, but that 88 formats out of 407 have OpenCL support. A few formats also have support for the ZTEX 1.15y, a now-discontinued FPGA-based board popular for crypto mining, which is something I don't think Hashcat has. Here's an article I found on that topic: https://medium.com/@ScatteredSecrets/bcrypt-password-cracking-extremely-slow-not-if-you-are-using-hundreds-of-fpgas-7ae42e3272f6 https://medium.com/@ScatteredSecrets/bcrypt-password-crackin... Edit: the two HN submissions for JtR 1.9.0 got no comments, but this Slashdot post does have some comments from a maintainer: https://it.slashdot.org/story/19/05/18/1841245/new-john-the-ripper-cracks-passwords-on-fpgas https://it.slashdot.org/story/19/05/18/1841245/new-john-the-...

gen3 6y ago

I’ve used johntheripper for wordlists and hashcat for brute-forcing, but the ethos might have changed.

Bnshsysjab 6y ago
Hashcat supports wordlists with large rule sets, search ‘best64 ruleset’ for instance
- gen3 6y ago
  Awesome, thank you!

Bnshsysjab 6y ago

Hashcat has far better performance, unsure if jtr supports ‘rules’ (eg add ‘1!’ Suffix to each word - bashcat has many rules like this). Hashcat is a pita for quick jobs so JTR is better if you’re teaching a class of unequipped students. I’ve never had hashcat work out of the box at all, either driver issues or it exits because it overheats my GFX. When it is running it is very, very good though.