Cybersecurity · hands-on lab
Kali Lab 04: john — Offline Hash Cracking
Crack lab-supplied password hashes offline and understand why slow, salted hashing matters.
- 35 minutesTime in the lab
- intermediateLevel
- 3 tasksChecked automatically
- CertificateVerifiable link when you finish
The situation
Tool: john the ripper. You recovered a file of password hashes from a test system (provided here). Show how quickly weak ones fall offline — and why modern salted, slow hashing is the defence.
What you will do
- Crack with the wordlist
- Save what cracked
- Why did the ciso hash survive?question
How it works
The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.