Tools and Utilities

Here are some tools and utilities commonly used for practices related to cryptography:

OpenSSL

• Tool-kit for cryptography

• Generate keys and certificates

• Encrypt and Decrypt data and typical ciphers

Commands

• Connect as a client

openssl s_client -connect $IP:$port

---

• Generate private key with RSA

openssl genrsa -out $name 2048

---

• Generate hash for Linux user

openssl passwd -1 -salt AAA $password

John the ripper

• Password cracking tool, known for its speed and efficiency in cracking weak passwords. Comes with various modules specialized for cracking and retrieving hashes from specific files.

Commands

• Install

sudo apt install john

---

• Broke hash

john $hashfile -w=$wordlist 
john $hashfile --incremental    #Break by bruteforcing

One famous dictionary is rockyou.txt which can be found by default on Kali Linux on /usr/share/wordlists/rockyou.txt

---

• Use unshadow to create a crackable file

unshadow $passwdFile $shadowFile > $outFile
#passwdFile and shadowFile are the /etc/passwd and /etc/shadow files respectively

---

• Extract hash from zip file

zip2john $zipfile
zip2john $zipfile > $hashfile #To save the recovered hash

Hashcat

• Password recovery tool that supports a wide range of hashing algorithms, primarily used for cracking passwords stored in hashed formats.

Commands

• Install

sudo apt install hashcat

---

• Filter code of a hash mode

hashcat --help | grep -i $keyword

---

• Attack hash

hashcat -a $attackmode -m $modecode $file.hash $dictionary

Dcode.fr

• Online tool for encrypting, decrypting, encoding, or decoding ciphers

• https://www.dcode.fr/en

Have a cipher identifier: https://www.dcode.fr/cipher-identifier

Cyberchef

• Online tool for encrypting, decrypting, encoding, or decoding ciphers

• https://gchq.github.io/CyberChef/

The magic mode helps you identify and decode automatically the ciphert

Crackstation

• Online tool for identifying hashes and finding their related values.

• https://crackstation.net/

Hash-identifier

• Command line utility to identify possible hashing methods related to a value

Commands

• Install

sudo apt install hash-identifier

---

• Filter code of a hash mode

hash-identifier $hash