Linux command
rar2john 命令
文本
涉及管道、覆盖或删除，执行前请先确认路径和参数。
常用示例
Extract hash from RAR file
rar2john [archive.rar] > [hash.txt]
Multiple archives
rar2john [file1.rar] [file2.rar] > [hashes.txt]
Then crack with John
john [hash.txt]
说明
rar2john extracts password hashes from encrypted RAR archives into a format suitable for offline password recovery with John the Ripper or Hashcat. It reads the archive's encryption metadata and outputs a hash string containing the cryptographic parameters needed to verify password guesses without repeatedly accessing the original archive file. The tool supports both RAR3 and RAR5 encryption formats, which use different key derivation algorithms. Multiple archives can be processed in a single invocation, with each hash line prefixed by the source filename. It is part of the John the Ripper jumbo suite and is typically used in authorized security auditing and password recovery scenarios.
FAQ
What is the rar2john command used for?
rar2john extracts password hashes from encrypted RAR archives into a format suitable for offline password recovery with John the Ripper or Hashcat. It reads the archive's encryption metadata and outputs a hash string containing the cryptographic parameters needed to verify password guesses without repeatedly accessing the original archive file. The tool supports both RAR3 and RAR5 encryption formats, which use different key derivation algorithms. Multiple archives can be processed in a single invocation, with each hash line prefixed by the source filename. It is part of the John the Ripper jumbo suite and is typically used in authorized security auditing and password recovery scenarios.
How do I run a basic rar2john example?
Run `rar2john [archive.rar] > [hash.txt]` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
Where can I find more rar2john examples?
This page includes 3 examples for rar2john, plus related commands for nearby Linux tasks.