Assignment No.
01
Semester: Fall 2024 Total Marks: 20
CS627: Cyber Security Due Date: November 14, 2024
Please read the following instructions carefully before submitting assignment:
It should be clear that your assignment will not get any credit if:
The assignment is submitted after due date.
The submitted assignment does not open or file is corrupt.
Solution is copied from any other source.
Objective
The objective of this assignment is to:
Learn and see how passwords are stored (in hash format)
Understand vulnerabilities of week passwords and realize the importance of strong
passwords.
Practice using John the Ripper tool for password cracking.
Task (20 Marks)
With this assignment, THREE password protected files are attached.
SampleFile.zip
Result.rar
MyPasswords.zip (this is protected using one of the passwords given in possible_password.txt file attached)
Cracking of the SampleFile.zip file is shown in Figure for your ready reference. Your job is to explore and use John the Ripper tool to crack
the passwords and reveal the contents of the files for the remaining TWO files. For this purpose, you need to download, install, and configure
John the Ripper, (download link for 64bit Windows/ download link for 32bit Windows) and try password cracking commands to achieve the
desired objective.
Note: You are, at this stage, expected to resolve/fix installation and configuration issues on your own.
Submission
You are required to submit your solution in MS Word file format containing:
Snapshots of your password cracking command along with successful outcome for any file as shown in Figure 1 below.
After successfully cracking, write the password and the original contents of these files by filling the following table.
File Name Password Hash Password in Plain Text Contents of Files
Result.rar
MyPasswords.zip
Run these commands in directory
named as your VU student ID and
take screenshot when your
cracking is successful.
Figure 1: This is an example screenshot sample Test.zip file cracking is successful, and its password was test.
Hint:
You need to use the passwords in given wordlist file possible_password.txt to crack the password of MyPasswords.zip