Printable View
ps. this is just on my computer and i am not going to hack any other because jail is not fun.
any ways i wanted to crack my password on a slackware machine, i already tried jack the ripper, and probably will try Crack. but are there other ways to crack linux passwords.
btw i have physical access to the machine.
thanks
I'm not sure but I bet there are. I'm sure that if you pop a copy of knoppix-std in there, it will have some tools to retrieve a password or something. Maybe someone else knows what the tools that can do this are, but I definitely recommend you download and burn knoppix-std(std=security tools distribution). I would say good luck, but if you are able to crack your password that means your machine is insecure, so I'm going to say bad luck.
i created 2 users with easy passwords one was user lfs with password of lfs the other was john with password spot, i was able to crack both in a day. the other took longer but they could have been cracked if i gave them more time
Another method of cracking linux passwords (lets say if you have a remote SSH account or something) is by using a packet sniffer.
Check out:
Understanding concepts from these three applications will help alot, not only with password cracking, but with network and internet connectivity also. Have fun. :)
John is currently the best password cracker for Unix. Crack used to be, but it doesn't support MD5 or Blowfish,Quote:
Originally posted here by qod
i created 2 users with easy passwords one was user lfs with password of lfs the other was john with password spot, i was able to crack both in a day. the other took longer but they could have been cracked if i gave them more time
only DES.
Yes as said ethereal is definetely a good tool to use for fun/research/learning etc..And john is definitely the most powerful cracker as spurious said, it supports more algorithms than crack..
Also, what type of processor are you running ? That could be a reason why john doesn't chew through passwords as fast as you would like it to :)
Hey I have a question about john. I have heard that a typical p4 can shoot through several thousand passwords a minute. I am fixing to get and athlon 64 laptop i would just like to see for shits if it would be any faster. Do any of you know anyway to optimize the code for 64 bit?
Simply compiling it from source should take care of most of that for you.
-- spurios
may beuse the crack jack the one use in *nix password it is a dos application maybe it will will amm not sure of it ..okay try google for other info...
as sorry it its cracker jack try to visit this link
http://www.netrom.com/~cassidy/crack.htm some for some info..
jtr always works, nothing else needed. ;) or if you cannot get the /etc/passwd then try PHF file in the /cgi-bin directory. if phf is there then you are in luck this file allows remote access to files (including the /etc/passwd file) to try this. open your web browser and type http://www.victim.com/cgi-bin/phf?Qa...%20/etc/passwd , ofcurse you have to change the victim.com to what ever you like . And if you want to be little fancier then try l0pht. This is going to cost little money but, damn, never saw anything like that. Some time takes a long time but always comes up with positive results.
L0pht does bunch of Windows pws, but I think you are really paying for the nice looking GUI interface. You have to be able to read a lot to use JtR ;) L0pht is just point and click, no typing. :D If you need a "free" version of L0pht I can help you. Good day.
-Cheers-
PS: The problem with dumping the SAM file is that you need Administrator privilages to use DLL injection. The alternative is to boot/run in DOS and copy the SAM file to a text file then reboot and crack.
ob bro let me answer you quation........
1) /etc/passwd !usually! doesnt store any passwords but links program requests to /etc/shadow which is 700 and cannot be read by any other user apart from root....
2) /etc/shadow contains the encrypted passwords BUT there are two diffrent encryption algorithms that may be used MD5 (if the admin is smart) and DES(if the admin doesnt give a ****)
to crach DES which is pretty weak you'll need JohnThe Ripper
to crach MD5 DA BEST WAY and DA QUICKEST is to use http://www.antsight.com/zsl/rainbowcrack/
a next generation cracker........ e.g password such as : rt56yu7878ijk can be cracked in 56 sec
You really should not do crack. It's bad for you and expensive.Quote:
Ok guyz there is one more thing...if the admin has used MD5 encryption...then u can use rtgen to generate hashes for md5 and then CAIN for crytpanalysis...this will crack MD5s faster...
read rainbow Crack tutorial here :http://www.antsight.com/zsl/rainbowc...cktutorial.htm
(specific to passwd cracking)
read abt rtgen approach in general here : http://www.computer.org/proceedings/...3560044abs.htm
CAin home here : http://www.oxid.it/cain.html
if u guyz can recalll "windows passwords can be broken in seconds" a few mnths ago...then just know they uset rtgen approach
just nJoy.
Doesnt matter if you have passwd shadowing enabled, i have seen many times this being comprimised, so even with this on you should still have strong passwords. But if you really want to test your crack get friends to input passwords for you, using ascii characters not on the keboard, numbers, hashes/etc and then you will find the integrity of your cracker.
p.s. make sure they write down the passwords (this can be trouble if they are TOO good)
the easiest way to crack the passwords on a linux box to wich you have physical access and wich uses lilo:
on the lilo prompt type Linux init=/bin/bash rw
as long as the image's name is Linux (ofcourse)
this starts a session in single user mode as root on a read-write filesystem
open the /etc/shadow file and remove the root password hash.. (or use passwd to change to a password you like)
this is the trick I use on old systems I recover ;)
Yea, and social engineering is just me preparing for a movie career. And hacking is "network security analysis"Quote:
You are good An ;)
i was trying to use john to crack my passwd to see how secure it was but i cant get it to work
im in my shell and i run every option needed and it would always print the help menu back to me
do u guys hve any tutorials or documents on how to use john?
thanx
JR should include some support documentation with it...........but I can suggest some good scenario for cracking with JR
./john -w:allwords2.dic -rules enc_pass_file
(allwords2.dic is a =>5 million english dictionary) www.passwords.ru/dic/allwords2.zip
good luck
thanx il give that a shot
will going into runlevel 1 bypass the password authentication??
On some systems, yes. Single user mode or Runlevel 1 often means that it logs in as root with no password. Many systems have put in the LILO fix or used Grub, asking for a password to going to single user mode. IIRC, single user mode was a "if your forgot your root pass or had super serious issue" kind of mode. :D
[edit]
Take a look at The_Jinx's post on Page 2 of this thread. That gives a prime example of how to do this from a lilo prompt.
<the password is in the /etc/ dirQuote:
Originally posted here by qod
ps. this is just on my computer and i am not going to hack any other because jail is not fun.
any ways i wanted to crack my password on a slackware machine, i already tried jack the ripper, and probably will try Crack. but are there other ways to crack linux passwords.
btw i have physical access to the machine.
thanks
it showd be called password shadow or something like that>