Practical 10 — Password Auditing with John the Ripper and Hashcat

Aim
Demonstrate dictionary-based password auditing against supplied lab hashes.

John the Ripper
1. Extract the authorized John Jumbo build.
2. Open CMD in its `run` directory.
3. Prepare a wordlist and supplied test hashes in text files.
4. Run the practical's hash-format and wordlist options.
5. Display recovered results with `john --show`.

Hashcat
1. Extract Hashcat binaries in the lab folder.
2. Prepare the supplied test hash file and wordlist.
3. Run the dictionary mode used in the practical.
4. Display recovered results with `--show`.

Key point: Results depend on hash format and wordlist. Use only supplied hashes or hashes you are authorized to audit.
