DEV Community: praise munene

ZIP PASSWORD CRACKING USING JOHN THE RIPPER IN KALI LINUX

praise munene — Mon, 14 Mar 2022 20:18:16 +0000

Hello,today am going to show you how to crack password protected zip files in kali linux.

Kali linux is pre installed with password cracking tools namely:

1.John the ripper
2.Fcrackzip utility
3.Wordlists
We’ll focus more on john the ripper which is pre-installed in most unix operating systems.
However if your linux operating system lacks this tools,you can install or update the necessary packages with the following commands:

$sudo apt update

$sudo apt install john fcrackzip wordlists

John the ripper will use its own wordlist located in the /user/share/john/password.lst to crack the password.you can also locate all the wordlists in your system by typing the following command:
$locate wordlist

Step 1:create a password protected zip file
The only other thing needed to start is a password protected zip file.
Follow the steps:
Create a text file add some text and name it say hacker.txt.
Open the terminal in the directory and type the following command
$zip -password 12345678 hacker.zip hacker.txt

The command creates a zip file with the password of your choosing after the word password in the shell command above.
Replace the file names and paths to your own.

Step 2:get the password hash
To get the password hash to be cracked, we need to enter the command:

$zip2john hacker.zip

Step 3:put the password hash in a text file
Type the following command :
$zip2john hacker.zip > hash3.txt

Followed by:
$John hash.txt

Sometimes you may need to customize or create your own wordlist or use a different wordlist the command follows the following format

$john –wordlist= the wordlist path saved hashes
I.e
$john --wordlist= /usr/share/wordlists/rockyou.txt hacker.txt

The time taken to crack each password varies with the strength of the password

WIFI PASSWORD HACKING FOR BEGINNERS WITH KALI LINUX

praise munene — Sat, 12 Mar 2022 15:19:34 +0000

There are many ways to attack WiFi networks depending on:

The type of encryption
Default settings
Number of connected clients

In this article we’ll focus on wifite
Wifite tool automates all these processes making wifi hacking a piece of cake.

WHAT IS WIFITE?
Wifite is a powerful hacking tool that allows the hacker to choose a specific network to attack and let the script choose the best strategy for each network
Wifite is developed by Derv82 and maintained by kimocoder

GETTING STARTED
The tool is pre-installed in kali linux and intuitive to use.

Follow the steps:

_Step 1:open wifite _

You can open the wifite tool from the application menu or from the terminal
Using application menu search for wifite and click on the tool to open
You can also open the terminal and type the following command:
sudo wifite

The following interface should appear

Step 2: select the target to attack

Once you open wifite it will start scanning for WiFi networks
Press Ctrl+c to stop

Ii. Choose the number of the WiFi network you wish to attack

Step 3: sit back and let the tool do the hacking

Here the attack begins. Wifite uses the following methods according to the network targeted:
WPS PIN attack
PMKID capture
WPS Pixie-Dust attack
WPA Handshake capture
Once finished you will see the following

The password will also automatically be saved in a cracked.json or cracked.txt file.and you can navigate to the file in the terminal and type the following command to view saved cracked passwords:

Cat cracked.json or cat cracked.txt

After hacking the wifi you’ll realise that you cannot use your wireless network.This is because your device is still in monitor mode.To disable monitor mode you need to type the following command in the terminal
airmon-ng stop wlan0mon