Dump hashes to file unshadow <passwdFile> <shadowFile> > <file> Crack using john john --wordlist=<wordlist> <file>