password cracking guide

[bofh28]

New members have to wait three days before they can download files.

[gordon__1]

Hi,
I've a new member but I can't download this file, anybody know how I can remedy the situation?

thanks

[w116tjb]

Hi,
I've a new member but I can't download this file, anybody know how I can remedy the situation?

thanks

I had the same problem. I think you have to be a member for a few days before you have full access to things like downloading and posting.

[G_Dub]

<sarcasm> why cant i download either????? </sarcasm>


Seriously though, Thank you for condensing all this information into one document, you answered a lot of questions i had.

[amenoera]

veru nice work

[drwalter]

I figured I'd test this out and followed the guide. I was able to retrieve my backtrack passwords but my fedora 9 passwords didn't show up. I did the following.

#mount /dev/sda1 /mnt/fedora/
#cd /etc/john
#unshadow /mnt/fedora/etc/passwd /mnt/fedora/etc/shadow >test
#john test
here I got the output: No password hashes loaded

ideas?
An issue with fedora maybe?

[bofh28]

I am working on updating the guide. It might be an issue with fedora 9 I don't know. I will download a live cd of fedora 9 and get back to this posting later this week or early next week. Can you please post the contents of test
(i.e. # cat test)?

Thanks,

[drwalter]

I am working on updating the guide. It might be an issue with fedora 9 I don't know. I will download a live cd of fedora 9 and get back to this posting later this week or early next week. Can you please post the contents of test
(i.e. # cat test)?

Thanks,

openvpn:!!:496:492:OpenVPN:/etc/openvpn:/sbin/nologin
mailnull:!!:47:47::/var/spool/mqueue:/sbin/nologin
smmsp:!!:51:51::/var/spool/mqueue:/sbin/nologin
sshd:!!:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
webalizer:!!:67:67:Webalizer:/var/www/usage:/sbin/nologin
rpcuser:!!:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
nfsnobody:!!:65534:491:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
torrent:!!:495:490:BitTorrent Seed/Tracker:/var/lib/bittorrent:/sbin/nologin
haldaemon:!!:68:68:HAL daemon:/:/sbin/nologin
hsqldb:!!:96:96::/var/lib/hsqldb:/sbin/nologin
gdm:!!:42:42::/var/lib/gdm:/sbin/nologin
ntp:!!:38:38::/etc/ntp:/sbin/nologin
squid:!!:23:23::/var/spool/squid:/sbin/nologin
backuppc:!!:494:489::/var/lib/BackupPC:/sbin/nologin
DrWalter:$6$L19nNdIR-EDIT$iE2XFFsfBTFfAUCs.u0RZlxbPL2x5L45cyx2oD8Zvs7Sr.Treb$
vdr:!!:493:488:Video Disk Recorder:/srv/vdr:/sbin/nologin
xttpd:!!:492:487:XTide web server:/etc/xtide:/sbin/nologin
clamav:!!:491:486:Clamav database update user:/var/lib/clamav:/sbin/nologin

I added the edit and cut out some of what looks to be hash although the error said there wasn't any present but you get the idea. Thanks for taking the time to look at it

[bofh28]

I figured I'd test this out and followed the guide. I was able to retrieve my backtrack passwords but my fedora 9 passwords didn't show up. I did the following.

#mount /dev/sda1 /mnt/fedora/
#cd /etc/john
#unshadow /mnt/fedora/etc/passwd /mnt/fedora/etc/shadow >test
#john test
here I got the output: No password hashes loaded

ideas?
An issue with fedora maybe?

OK I had some time this morning and it is not a problem with fedora 9. I booted off of the Live CD and did the following:
adduser usera
passwd usera (password)
/mnt/bt3/usr/local/john/unshadow /etc/passwd /etc/shadow >/hash.txt
/mnt/bt3/usr/local/john/john /hash.txt
password

The full paths are because I booted from a cd and ran john from the hard drive. It looks like the unshadow did not work. Here is what my hash.txt looks like for usera:
usera:$1$qLMNTNhW$yyWg.EzvoMyCofteUP8g0.:501:501::/home/usera:/bin/bash
yours is
DrWalter:$6$L19nNdIR-EDIT$iE2XFFsfBTFfAUCs.u0RZlxbPL2x5L45cyx2oD8Zvs7Sr .Treb$

As you can see you have some missing fields so john doesn't think your hash is valid. Try it again and pay attention to the output of the unshadow command.

If you need any more help let me know and answer this: Are you using a regular Fedora install (download or install from a fedora mirror) or is this a customized Fedora based installation? What command did you use to create the user?

[Missing File]

Awesome. Thanks for taking the time to do that