macOS
Homebrewverified · 100%
brew install john-jumbolocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install johnMacPorts ports tree · sysutils/john/Portfile · source: api.github.com
brew / rank 1596
Install john-jumbo with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper
Enhanced version of john, a UNIX password cracker. Version 1.9.0 via Homebrew; verified 2026-08-02. Also installable with macports: sudo port install john.
install
Additional install commands
Linux
Alpine Linux apkverified · 92%
sudo apk add johnAlpine Linux edge package indexes · john · source: dl-cdn.alpinelinux.org
Debian aptverified · 92%
sudo apt install johnDebian stable package indexes · john · source: deb.debian.org
Fedora dnfverified · 92%
sudo dnf install johnFedora Rawhide package metadata · john · source: dl.fedoraproject.org
Nixverified · 92%
nix profile install nixpkgs#johnnixpkgs package indexes · pkgs/by-name/jo/john/package.nix · source: api.github.com
Arch Linux pacmanverified · 92%
sudo pacman -S johnArch Linux sync databases · john · source: geo.mirror.pkgbuild.com
openSUSE zypperverified · 92%
sudo zypper install johnopenSUSE Tumbleweed package metadata · john · source: download.opensuse.org
overview
Package summary
Enhanced version of john, a UNIX password cracker
Project links
Commands and aliases
- john
history
Project history and usage
John the Ripper Jumbo is the community-enhanced branch of John the Ripper, an offline password auditing and recovery tool. The Jumbo line adds large amounts of community code, documentation, formats, and helper data beyond the core cracker, including support for hundreds of hash and cipher types.
Project history
John the Ripper began in 1996 as Solar Designer's replacement for Cracker Jack, with prototypes for incremental mode dating to 1995. It became open source in 1997, and the 1.5 rewrite in 1998 became the basis for later versions. The public GitHub repository was created in 2011 and uses bleeding-jumbo as its default branch.
The Jumbo branch formalized the place where experimental and community-contributed cracking formats, scripts, and documentation could land faster than in the core release. Openwall's own README warns that Jumbo contains much more functionality and lower maturity guarantees than core, which is exactly why it became the branch most security practitioners reach for when they need broad format coverage.
Adoption history
Openwall distributes Jumbo source and Windows binaries and recommends the GitHub development source in preference to the old Jumbo release tarball. Homebrew packages it separately as john-jumbo, where it conflicts with the core john formula and pulls in extra dependencies such as GMP and OpenSSL.
The upstream homepage and Homebrew formula show the package-manager split clearly: core john remains available, while john-jumbo is the enhanced formula for users who want broader cracking coverage.
How it is used
Jumbo is used for password-auditing jobs where the input format may be archive files, office documents, SSH keys, cryptocurrency wallets, network captures, operating-system password stores, databases, or web application hashes. Users typically run converter tools where needed, crack with john, and inspect results with john --show or the john.pot store.
Why package nerds care
The john-jumbo formula is package-nerd-interesting because it captures a real upstream social split: a conservative core and a fast-moving, format-rich Jumbo branch. It also exposes the maintenance cost of security packages that bundle optimized CPU/GPU code, optional cryptographic libraries, helper scripts, and many architecture-specific assumptions.
Timeline
- 1995: Prototypes for John's incremental mode were written.
- 1996: John the Ripper 1.0 was released as a Cracker Jack replacement.
- 1997: John the Ripper became open source.
- 1998: Version 1.5 rewrote the codebase that later versions built upon.
- 2011: The openwall/john GitHub repository was created.
- 2019: Openwall released the 1.9.0 Jumbo line and documented it separately from core.
Related projects
- Related projects include John the Ripper core, John the Ripper Pro, Hash Suite, Hash Suite Droid, Openwall wordlists, yescrypt, crypt_blowfish, passwdqc, john-packages, and the Johnny GUI.
Sources
security posture
No protected-tool coverage found yet
No matching local secret-handling manifest was found for john-jumbo. Nucleus package metadata is still published here so future coverage has a stable package URL.
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
john | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version1.9.0
manager updated2026-08-02
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:john-jumbo |
|---|---|
| Version | 1.9.0 |
| Package manager | Homebrew |
| Homepage | https://www.openwall.com/john/ |
| Last updated | 2026-08-02T01:26:52+09:00 |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
MacPorts94%
john
sudo port install john- installed executable or alias match
- Matched by: John
Debian apt92%
john 1.9.0-2
active password cracking tool
sudo apt install john- Section: admin
- Architecture: amd64
- 4 dependencies
- 1 optional deps
- installed executable or alias match
- Matched by: John
Debian apt92%
john-data 1.9.0-2
active password cracking tool - character sets
sudo apt install john-data- Section: admin
- Architecture: all
- Source Package: john
- installed executable or alias match
- Matched by: John
Nix92%
john
nix profile install nixpkgs#john- installed executable or alias match
- Matched by: John
Ubuntu apt92%
john 1.9.0-2build1
active password cracking tool
sudo apt install john- Section: admin
- Architecture: amd64
- 4 dependencies
- 1 optional deps
- installed executable or alias match
- Matched by: John
Ubuntu apt92%
john-data 1.9.0-2build1
active password cracking tool - character sets
sudo apt install john-data- Section: admin
- Architecture: all
- Source Package: john
- installed executable or alias match
- Matched by: John
apk92%
john 1.9.0-r8
John the Ripper password cracker
sudo apk add john- License: GPL-2.0-or-later
- Architecture: x86_64
- Source Package: john
- 1 dependencies
- 1 provides
- installed executable or alias match
- Matched by: John
apk92%
john-bash-completion 1.9.0-r8
Bash completions for john
sudo apk add john-bash-completion- License: GPL-2.0-or-later
- Architecture: x86_64
- Source Package: john
- installed executable or alias match
- Matched by: John
apk92%
john-doc 1.9.0-r8
John the Ripper password cracker (documentation)
sudo apk add john-doc- License: GPL-2.0-or-later
- Architecture: x86_64
- Source Package: john
- installed executable or alias match
- Matched by: John
apk92%
john-zsh-completion 1.9.0-r8
Zsh completions for john
sudo apk add john-zsh-completion- License: GPL-2.0-or-later
- Architecture: x86_64
- Source Package: john
- installed executable or alias match
- Matched by: John
dnf92%
john 1.9.0-12.fc43
John the Ripper password cracker
sudo dnf install john- License: GPL-2.0-only
- Category: Unspecified
- Architecture: x86_64
- Source Package: john
- 6 dependencies
- 2 provides
- installed executable or alias match
- Matched by: John
pacman92%
john 1.9.0.jumbo1-13
John the Ripper password cracker
sudo pacman -S john- License: GPL2 AND custom
- Architecture: x86_64
- 8 dependencies
- 5 optional deps
- installed executable or alias match
- Matched by: John
zypper92%
john 1.9.0-9.14
Utility to detect weak passwords
https://www.openwall.com/john/
sudo zypper install john- License: GPL-2.0-or-later
- Category: Productivity/Security
- Architecture: x86_64
- Source Package: john
- 14 dependencies
- 2 provides
- installed executable or alias match
- Matched by: John
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- pkg.so package database
- pkgdb category and tag curation