“Unfortunately, Drupal’s hashes are salted (a random string is prepended to the password), making them time-consuming to crack. Even hours after launching John, we cannot get a positive result. It looks like the passwords are pretty strong. Our only other option is to plant an SSH key.”