Download and installation

wget http://www.openwall.com/john/g/john-1.7.3.1.tar.gz

getting the hash

pwdump
cain
l0phtcrack

using jtr for windows passwords

notes on keyspace

JTR cracking Ubuntu passwords

sudo /usr/sbin/unshadow /etc/passwd /etc/shadow > localpaswds
However, JTR doesn't support SHA, which Ubuntu 9.10 uses.
http://www.linuxquestions.org/questions/linux-security-4/password-hash-721494/
https://lists.ubuntu.com/archives/ubuntu-devel/2008-August/026204.html
The 'correct' way in Ubuntu is to have physical access and reboot into single user mode:
http://www.psychocats.net/ubuntu/resetpassword
and similarly for macs
http://www.macyourself.com/2009/08/03/how-to-reset-your-mac-os-x-password-without-an-installer-disc/

JTR parallel

Multi-core: use MPI
http://www.oiepoie.nl/2007/02/11/high-speed-password-cracking-with-john-the-ripper/
MPI:http://bindshell.net/tools/johntheripper

http://www.experts-exchange.com/Security/Q_21236953.html

http://opensource.apress.com/index.php?id=57

djohn:

http://ktulu.com.ar/blog/software/djohn/

CPU per user:http://www.howtoforge.com/forums/showthread.php?p=137522

benchmark results

quad core with Ubuntu 9.10

$ uname -a
Linux user-desktop 2.6.31-17-generic #54-Ubuntu SMP Thu Dec 10 17:01:44 UTC 2009 x86_64 GNU/Linux
$ cat /proc/cpuinfo
Intel Core2 Quad CPU Q8200 @ 2.33GHz
with 8 Gb RAM and SATA hard drives
$ sudo hdparm -Tt /dev/sda1
/dev/sda1:
Timing cached reads: 3304 MB in 2.00 seconds = 1651.85 MB/sec
Timing buffered disk reads: 312 MB in 3.00 seconds = 104.00 MB/sec
Using John 1.7.2
$ john --test
Benchmarking: Traditional DES [64/64 BS]... DONE
Many salts: 1145K c/s real, 1147K c/s virtual
Only one salt: 1057K c/s real, 1059K c/s virtual
Benchmarking: BSDI DES (x725) [64/64 BS]... DONE
Many salts: 39233 c/s real, 39233 c/s virtual
Only one salt: 38769 c/s real, 38769 c/s virtual
Benchmarking: FreeBSD MD5 [32/64 X2]... DONE
Raw: 9989 c/s real, 9989 c/s virtual
Benchmarking: OpenBSD Blowfish (x32) [32/64]... DONE
Raw: 349 c/s real, 350 c/s virtual
Benchmarking: Kerberos AFS DES [48/64 4K]... DONE
Short: 312969 c/s real, 312969 c/s virtual
Long: 995059 c/s real, 995059 c/s virtual
Benchmarking: NT LM DES [64/64 BS]... DONE
Raw: 9532K c/s real, 9546K c/s virtual
Benchmarking: NT MD4 [Generic 1x]... DONE
Raw: 9465K c/s real, 9465K c/s virtual
Benchmarking: M$ Cache Hash [Generic 1x]... DONE
Many salts: 12955K c/s real, 12955K c/s virtual
Only one salt: 5242K c/s real, 5242K c/s virtual
Benchmarking: LM C/R DES [netlm]... DONE
Many salts: 431069 c/s real, 431069 c/s virtual
Only one salt: 420692 c/s real, 420692 c/s virtual
Benchmarking: NTLMv1 C/R MD4 DES [netntlm]... DONE
Many salts: 615903 c/s real, 615903 c/s virtual
Only one salt: 590746 c/s real, 590746 c/s virtual