1. Generar Diccionarios (Wordlists)

CUPP (Perfilado de usuario): Crea diccionarios basados en datos personales (mascotas, fechas).

cupp -i

CeWL (Spidering Web): Crea un diccionario con las palabras que aparecen en una web.

cewl http://target.com -w target_wordlist.txt

2. John The Ripper (JtR)

Ver contraseñas ya crackeadas:

john --show hash.txt

Cracking Linux (/etc/shadow): Necesitas passwd y shadow.

# 1. Unificar
unshadow passwd.txt shadow.txt > unshadowed.txt

# 2. Crackear
john --wordlist=/usr/share/wordlists/rockyou.txt unshadowed.txt

Cracking ZIP:

# 1. Extraer hash
zip2john fichero.zip > hash_zip.txt

# 2. Crackear
john --wordlist=rockyou.txt hash_zip.txt
# (Alternativa antigua: fcrackzip -v -u -D -p rockyou.txt fichero.zip)

Cracking Keepass (.kdbx):

keepass2john Database.kdbx > hash_keepass.txt
john --wordlist=rockyou.txt hash_keepass.txt

Cracking SSH (id_rsa):

ssh2john id_rsa > hash_ssh.txt
john --wordlist=rockyou.txt hash_ssh.txt

Cracking GPG (.asc):

# 1. Extraer hash
gpg2john clave.asc > hash_gpg.txt

# 2. Crackear
john --wordlist=rockyou.txt hash_gpg.txt

# 3. Importar y Descrifrar
gpg --import clave.asc
gpg --decrypt fichero.gpg

Cracking Hashes MD5/SHA Online: