A PRACTICAL IMPLEMENTATION OF SOFTWARE TOOLS FOR CHECKING THE LEVEL OF SECURITY IN THE USE OF PASSWORDS: A PRACTICAL IMPLEMENTATION OF SOFTWARE TOOLS FOR CHECKING THE LEVEL OF SECURITY IN THE USE OF PASSWORDS

Petar Boyanov

doi:10.46687/jsar.v30i1.490

Authors

Petar Boyanov Department of Communication and Computer Engineering and Security Technologies, Faculty of Technical Sciences, Konstantin Preslavsky University of Shumen, Shumen 9712, 115 Universitetska St., e-mail: petar.boyanov@shu.bg

DOI:

https://doi.org/10.46687/jsar.v30i1.490

Keywords:

John the Ripper, Password security, Password cracking, Password hashes, Kali Linux, ZIP archives, Wordlist attack

Abstract

In this scientific article a practical implementation of software tools for checking the level of security in the use of passwords is shown. The article explains how password-cracking tools use hash values in a controlled laboratory environment without internet access. It also presents ways to create and protect strong passwords.

Author Biography

Petar Boyanov, Department of Communication and Computer Engineering and Security Technologies, Faculty of Technical Sciences, Konstantin Preslavsky University of Shumen, Shumen 9712, 115 Universitetska St., e-mail: petar.boyanov@shu.bg

Department of Communication and Computer Engineering and Security Technologies, Faculty of Technical Sciences, Konstantin Preslavsky University of Shumen, Shumen 9712, 115 Universitetska St., e-mail: petar.boyanov@shu.bg

References

Agboluaje, R., & Odejobi, O. (2024). Comparative Analysis of John the Ripper, Cain and Abel, and Hashcat for Password Recovery in Encrypted Files and Archives.

Di Campi, A. M., Focardi, R., & Luccio, F. L. (2022, September). The revenge of password crackers: Automated training of password cracking tools. In European symposium on research in computer security (pp. 317-336). Cham: Springer Nature Switzerland.

Leyte-Vidal, J. (2024). Ethical Password Cracking: Decode passwords using John the Ripper, hashcat, and advanced methods for password breaking. Packt Publishing Ltd., ISBN 1804613851, 9781804613856, p. 168.

Liu, E., Nakanishi, A., Golla, M., Cash, D., & Ur, B. (2019, May). Reasoning analytically about password-cracking software. 2019 IEEE Symposium on Security and Privacy (SP), San Francisco, CA, USA, 2019, pp. 380-397, DOI: 10.1109/SP.2019.00070.

Lubeck, T. (2013). Distributed Password Cracking with John the Ripper. Computer Security–Tufts Comp116,

Marchetti, K., & Bodily, P. (2022, May). John the Ripper: An examination and analysis of the popular hash cracking algorithm. 2022 Intermountain Engineering, Technology and Computing (IETC), Orem, UT, USA, 2022, pp. 1-6, DOI: 10.1109/IETC54973.2022.9796671.

O’Leary, M. (2026). User Authentication and Passwords. In Linux Security Foundations (pp. 113-172). Apress, Berkeley, CA, Online ISBN 979-8-8688-2664-1, https://doi.org/10.1007/979-8-8688-2664-1_3.

Pahuja, D., & Sidana, P. (2021). Implementing and comparing different password cracking tools. International Research Journal of Engineering and Technology (IRJET), 8(5), 2089-2095.

Shi, C., Li, Z., & Li, X. (2025). System Password Security: Attack and Defense Mechanisms. arXiv preprint arXiv:2510.10246, https://doi.org/10.48550/arXiv.2510.10246.

Sykes, E. R., Lin, M., & Skoczen, W. (2010, November). MPI enhancements in John the Ripper. In Journal of Physics, Volume 256, High Performance Computing Symposium (HPCS2010) 5–9 June 2010, Victoria College, University of Toronto, Canada, DOI: 10.1088/1742-6596/256/1/012024.

Weir, M., Aggarwal, S., De Medeiros, B., & Glodek, B. (2009, May). Password cracking using probabilistic context-free grammars. 2009 30th IEEE Symposium on Security and Privacy, Oakland, CA, USA, 2009, pp. 391-405, DOI: 10.1109/SP.2009.8.

A PRACTICAL IMPLEMENTATION OF SOFTWARE TOOLS FOR CHECKING THE LEVEL OF SECURITY IN THE USE OF PASSWORDS