nerdexam
CompTIA

LX0-104 · Question #416

The system administrator wishes to use John the Ripper to confirm that the passwords in a file called passwords are not weak. john has finished but the terminal window running the program has closed.

The correct answer is D. john show passwords. To display the passwords cracked by John the Ripper from a specific session, the john --show command followed by the original password file name should be used.

Security

Question

The system administrator wishes to use John the Ripper to confirm that the passwords in a file called passwords are not weak. john has finished but the terminal window running the program has closed. What command can be used to list any cracked passwords for this file?

Options

  • Ajohn list passwords
  • Bjohn list
  • Cjohn show
  • Djohn show passwords

How the community answered

(39 responses)
  • A
    3% (1)
  • B
    8% (3)
  • C
    3% (1)
  • D
    87% (34)

Why each option

To display the passwords cracked by John the Ripper from a specific session, the `john --show` command followed by the original password file name should be used.

Ajohn list passwords

The `list` option is not a standard John the Ripper command-line option for showing cracked passwords; `--show` is the correct option.

Bjohn list

The `list` option is not a standard John the Ripper command-line option for showing cracked passwords; `--show` is the correct option.

Cjohn show

While `john --show` is correct, omitting the filename would show all cracked passwords in the pot file, not specifically those associated with the `passwords` file, which is implied by the question to be the target.

Djohn show passwordsCorrect

The `john --show` command is used to display the cracked passwords that John the Ripper has successfully recovered and stored in its pot file for a given input file, linking them back to the original hashes.

Concept tested: John the Ripper cracked password retrieval

Source: https://www.openwall.com/john/doc/OPTIONS.shtml

Topics

#John the Ripper#password cracking#password security

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice