Lab – Password Cracking Answers


Last Updated on February 12, 2019 by InfraExam Lab – Password Cracking Answers

Lab – Password Cracking (Answers Version)

Answers Note: Red font color or gray highlights indicate text that appears in the Answers copy only.


Use a password cracking tool to recover a user’s password.

Background / Scenario

There are four user accounts, Alice, Bob, Eve, and Eric, on a Linux system. You will recover these passwords using John the Ripper, an open source password cracking tool.

Required Resources

  • PC with Ubuntu 16.04 Desktop LTS installed in a VirtualBox or VMware virtual machine.

Step 1: Open a terminal window in Ubuntu.

  1. Log in to Ubuntu using the following credentials:
    User: cisco
    Password: password
  2. Click on the terminal icon to open terminal.

Step 2: Run John the Ripper.

  1. At the command prompt, enter the following command to change to the directory where John the Ripper is located:
    [email protected]:~$ cd ~/Downloads/john-1.8.0/run
  2. At the command prompt, enter the following command :
    [email protected]:~/Downloads/john-1.8.0/run$ sudo ./unshadow /etc/passwd /etc/shadow > mypasswdThis command will combine the /etc/passwd file where user accounts are stored, with the /etc/shadow file where user passwords are stored, into a new file called “mypasswd”.

Step 3: Recover Passwords.

  1. Type the following command in terminal:
    [email protected]:~/Downloads/john-1.8.0/run$ ./john –show mypasswdAs shown above, there are no cracked passwords at this point.
  2. At the command prompt, enter the following command:
    [email protected]:~/Downloads/john-1.8.0/run$ ./john –wordlist=password.lst –rules mypasswd –format=cryptThe program, John the Ripper, uses a predefined dictionary called password.lst with a standard set of predefined “rules” for handling the dictionary and retrieves all password hashes of both md5crypt and crypt type.
    The results below display the passwords for each account.
  3. At the command prompt, enter the following command:
    [email protected]:~/Downloads/john-1.8.0/run$ ./john –show mypasswdHow many passwords were cracked?____________________________________________________________________________________
    Five (5)—the four user accounts plus the Cisco account.


John the Ripper: http://www.openwall.com/john/

2.7 3 votes
Article Rating
Notify of
Inline Feedbacks
View all comments