john is using a special tool on his linux platform that has a database containing signatures to be able to detect hundreds of vulnerabilities in unix windows and commonly used web cgi scripts moreover