John the Ripper Help Tricks

Find Hash Format Modules

Find supported hash types

# Field 1 is the Format label
# Field 7 is the Algorithm name
john --list=format-details --format=all | cut -f 1,7 | grep -i <hash_type>

Show information about the netntlmv2 format

john --list=format-all-details --format=netntlmv2

Example ciphertext                   USER1::Domain:1122334455667788:5E4AB1BF243DCA304A00ADEF78DC38DF:0101000000000000BB50305495AACA01338BC7B090A62856000000000200120057004F0052004B00470052004F00550050000000000000000000

Example ciphertext shows expected hash format

Show information about the PBKDF2-HMAC-SHA256 format

john --list=format-all-details --format=PBKDF2-HMAC-SHA256

Example ciphertext                   $pbkdf2-sha256$1000$b1dWS2dab3dKQWhPSUg3cg$UY9j5wlyxtsJqhDKTqua8Q3fMp0ojc2pOnErzr8ntLE

Example ciphertext shows algorithm, iterations, salt, and hash separated by a dollar sign

There are some inconsistencies here with the help output, as further research with the example ciphertext shows that it should be formatted $pbkdf2-sha256$1000.salt.hash, which is documented properly for the other PBKDF2 formats