About
John the Ripper tests candidate values against stored hashes to find which it can recover. It ships with many format modules and rules. Use it only on hashes from systems you own or have written permission to test.
Install it
pkg install john
Run this inside Termux. If the package is already present, pkg will say so and
do nothing.
Commands worth knowing
6 of the invocations you will actually reach for. Tap the copy button to put one on your clipboard.
john --format=raw-md5 hashes.txt Audit a set of MD5 digests, on data you own or are authorised to test, to show how quickly weak values fall. john --wordlist=wordlist.txt hashes.txt Run a dictionary attack against a hash file to measure how strong the policy is. john --show hashes.txt List the digests that were already recovered and their plaintext. john --incremental hashes.txt Try progressively longer combinations after a wordlist fails. john --format=bcrypt shadow.txt Audit bcrypt entries taken from a system you are permitted to test. john --list=formats Print every hash format this build supports. Pick the right one. Worked example
Run john --wordlist=wordlist.txt hashes.txt and this is what you should see.
$ john --wordlist=wordlist.txt hashes.txt
Loaded 5 password hashes
Press q or Ctrl-C to abort
Will run 4 OpenMP threads
produced 4 passwords
3g 0:00:00:02 100% 2.1g/s Developed by
Openwall .