Penetration Testing: Re: Novell password

["Paul Melson" <pmelson () gmail com>]

On 5/2/07, Brian Johnson <brian.l.johnson () gmail com> wrote:
> I have root on a Novell (Suse based) server and am trying to figure
> out where the eDirectory passwords are stored and if there is a method
> to crack these.  Any assistance would be much appreciated.
Is ndsd running on that server?  Look for /var/nds/dib on the server.
You can take an image of the database with ndsbackup, but if I
remember correctly it shuts down the directory server while it runs.
Even so, I'm doubtful that the files will be in a format where object
names and password hashes will be visible like they are in an
/etc/shadow file.

Also check out NovaCoast Castor - http://www.novacoast.com/products-castor.php

PaulM

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------