John the Ripper vs. Kali Linux

It is best suited in those environments where complexity is not the key. We've used it fairly extensively in our UNIX to find weak UNIX passwords and in Windows environments too. It's very easy to get hold of as it is essentially Open Source, although a paid version is now available and we are thinking of looking at this proposition in-depth to see if it is viable. We found it easy to install and deploy across our systems. Patching was fairly regular, so we always had the latest version. It holds its own against DES and Blowfish encryption algorithms among many others.

Incentivized

Kali Linux is especially well suited in environments where high security is needed for your custom developed applications. This is well suited for offensive testing your high security in house developed applications. It is also very good for doing penetration testing on in house developed applications and safe guarding them from external attackers. Kali Linux is tough for use as a day to day Linux operating system as this was never intended to be used by beginners and occasional Linux users.

Incentivized

• Easily finds plantect passwords.
• Simply detects passwords hashes.
• Has a fully bespoke cracker that can be modified to users requirements.
• Excellent for UNIX and Windows usage.

Incentivized

• Analyzing SSL certificates
• Analyzing SSL server configurations
• Vulnerability scanning
• Port scanning

Incentivized

• It needs to be modified to be able to break SHA 256, 512 and the lastest hashes.
• Can be slow and wildly against the lastest hashes.
• Require admin access to set up account.
• Old and is being superseded by better applications.

Incentivized

• Option to deselect tools upon install
• Instructions for all the tools
• Lightweight install option

Incentivized

'John the Ripper' being open source was free to use, whereas the others had to be paid for. It was very simple to install and runs against many hundreds of hashes and crypts. It is always developing thanks to large communities on GitHub.

Incentivized

I will Stack Kali Linux at the top of among to its similar devices.

Incentivized

• Helped us achieve initial Password Auditor goals and targets.
• Simple and cheap to deploy, so have saved greatly compared to paid for products.

Incentivized

• Costs
• Time taken to setup
• Configurations needed for each use

Incentivized