John the Ripper/Shadow File - Revision history

Admin: /* Wordlist Mode */

2016-03-26T05:38:28Z

Wordlist Mode

← Older revision		Revision as of 05:38, 26 March 2016
Line 88:		Line 88:
	==Wordlist Mode==		==Wordlist Mode==

	Now run John with a wordlist and tell it to generate rules from ~~that~~ wordlist:		Now run John with a wordlist and tell it to generate rules from the wordlist <code>500-worst-passwords.txt</code>:

	<pre>		<pre>
Line 107:		Line 107:
	Bingo, another account compromised by using a list of the 500 worst passwords imaginable.		Bingo, another account compromised by using a list of the 500 worst passwords imaginable.

	We have two left to compromise. Attacking with the rockyou ~~password list~~ reveals one more:		We have two left to compromise. Attacking with the wordlist <code>rockyou.txt</code> reveals one more:

	<pre>		<pre>

2016-03-26T05:36:54Z

Wordlist Mode

@@ Line 106: / Line 106: @@
 Bingo, another account compromised by using a list of the 500 worst passwords imaginable.
 =Flags=
 {{JohnFlag}}

2016-03-26T05:35:44Z

Wordlist Mode

← Older revision		Revision as of 05:35, 26 March 2016
Line 105:		Line 105:
	</pre>		</pre>

	Bingo, another account compromised.		Bingo, another account compromised by using a list of the 500 worst passwords imaginable.

	=Flags=		=Flags=

	{{JohnFlag}}		{{JohnFlag}}

2016-03-26T05:35:25Z

Using John to Crack

@@ Line 61: / Line 61: @@
 =Using John to Crack=
 The procedure for using John is to start in single mode:
@@ Line 83: / Line 85: @@
 Bingo! We have already compromised 4 accounts. These 4 accounts each have a password that is the same as the username.
 =Flags=
 {{JohnFlag}}

2016-03-26T05:34:21Z

Unshadow the Shadow

@@ Line 55: / Line 55: @@
 <pre>
 umask 077
-unshadow /etc/passwd /etc/shadow > mypasswd
+unshadow r00tpasswd r00tshadow > r00t4john
 </pre>
 Now you can run [[John the Ripper]] on the file <code>mypasswd</code>.
 =Flags=
 {{JohnFlag}}

2016-03-26T05:21:43Z

Unshadow the Shadow

← Older revision		Revision as of 05:21, 26 March 2016
Line 58:		Line 58:
	</pre>		</pre>

	Now you can run John the Ripper on the file <code>mypasswd</code>.		Now you can run [[John the Ripper]] on the file <code>mypasswd</code>.

	=Flags=		=Flags=

	{{JohnFlag}}		{{JohnFlag}}

2016-03-26T05:20:07Z

← Older revision		Revision as of 05:20, 26 March 2016
Line 1:		Line 1:
	This page covers how to use [[John the ~~RIpper~~]] to deal with <code>/etc/shadow</code> files.		This page covers how to use [[John the Ripper]] to deal with <code>/etc/shadow</code> files.

	=Shadow File=		=Shadow File=

2016-03-26T05:19:53Z

← Older revision		Revision as of 05:19, 26 March 2016
Line 1:		Line 1:
			This page covers how to use [[John the RIpper]] to deal with <code>/etc/shadow</code> files.

	=Shadow File=		=Shadow File=

2016-03-26T05:19:25Z

Unshadow the Shadow

← Older revision		Revision as of 05:19, 26 March 2016
Line 56:		Line 56:
	</pre>		</pre>

			Now you can run John the Ripper on the file <code>mypasswd</code>.




	=Flags=		=Flags=

	{{JohnFlag}}		{{JohnFlag}}

2016-03-26T05:19:04Z

← Older revision		Revision as of 05:19, 26 March 2016
Line 47:		Line 47:
	Only users with a password hash can log in (if there is a <code>*</code> or a <code>!</code>, they cannot log in).		Only users with a password hash can log in (if there is a <code>*</code> or a <code>!</code>, they cannot log in).

			=Unshadow the Shadow=

			To turn an <code>/etc/shadow</code> file into a normal unix password file, use the <code>unshadow</code> utility (from John the Ripper):

			<pre>
			umask 077
			unshadow /etc/passwd /etc/shadow > mypasswd
			</pre>






			=Flags=

	{{JohnFlag}}		{{JohnFlag}}