Which password hash types are listed as crackable by John the Ripper?

• A. MD5, SHA1, NTLM
• B. DES, MD5, SHA-256
• C. S/Key, Kerberos V5, AFS Kerberos V4, Netscape LDAP SHA Hashes, MySQL PW
• D. bcrypt, scrypt

Answer: (C)

John the Ripper works by using dedicated format modules that know how to process each hash type and test candidate passwords against it. The formats listed—S/Key, Kerberos V5, AFS Kerberos V4, Netscape LDAP SHA Hashes, and MySQL password hashes—have explicit modules in John the Ripper (especially in the jumbo version) and are documented as crackable. Each format corresponds to a specific hashing or password-storage scheme: S/Key uses a hash-chain scheme, Kerberos V5 and AFS Kerberos v4 rely on Kerberos password-to-key derivations, Netscape LDAP SHA stores SHA-based password digests, and MySQL password hashes use MySQL’s old password scheme. Because John the Ripper includes these exact format modules, they are listed as crackable by the tool. While other formats like MD5, DES, SHA-256, NTLM, bcrypt, and scrypt are also crackable with John the Ripper, the given set corresponds to formats explicitly identified as crackable in its documented modules.