Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Penetration Testing: Re: Etc/shadow file and john

Re: Etc/shadow file and john

From: Sherwyn Williams <sherwill22_at_tmail.com>
Date: Thu, 28 Jul 2005 06:50:02 -0400

Thanks I will try that and report my results later

On Thu, 28 Jul 2005 2:03, frank boldewin wrote:
> are you just using the shadow file?
> to crack it with john you have to correlate it with the passwd file.
> there should be a tool in your john directory, which is called
> unshadow.
> so safe the shadow and passwd from the machine and do the following:
>
> unshadow passwd.txt shadow.txt > tocrack.txt
>
> then tocrack.txt can be cracked by john
> hope that helps.
>
> cheers,
> frank
>
>
> ----- Original Message ----- From: "Sherwyn Williams"
> <sherwill22_at_tmail.com>
> To: <pen-test_at_securityfocus.com>
> Sent: Wednesday, July 27, 2005 6:56 PM
> Subject: Etc/shadow file and john
>
>
>> I am doing an assesment for passwords on a network, after getting the
>> password file I piped the output to a text file, tried to run that
>> against John and can't get any luck with the program. Do anyone here
>> uses any other password programs, and is there a better format than a
>> text file to store the out of the etc/shadow when trying to get the
>> passes.
>> Sherwyn Williams
>> Technical Consultant
>> Sherwill22_at_tmail.com
>>
Sherwyn Williams
Technical Consultant
Sherwill22_at_tmail.com
Received on Jul 28 2005

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]