UGN Security Forums
My ProfileMember DirectoryLogin
Search our ForumsView our FAQView our Site Rules
View our CalendarView our Active TopicsGo to our Main Page

UGN Security Store
 

Network Sites UGN Security, The GoNix Initiative, Elite Web Gamers, Back of the Web, EveryDay Helper, VNC Web Design & Development
Sponsored Links
Latest Postings
Latest Reviews
Topic Options
Rate This Topic
#9327 - 09/04/04 07:33 AM how to crack shadowed password files?
champatram Offline
Junior Member

Registered: 08/28/04
Posts: 7
Loc: india
Is it posible to crack shadowed password files. If so how to go about it. If not is there some other alternative to it.
_________________________
"I dream, so I do."

Top
Sponsored Links
      
#9328 - 09/07/04 11:32 PM Re: how to crack shadowed password files?
sinetific Offline
nobody

Registered: 03/02/02
Posts: 815
Loc: Ann Arbor
Yes, if you can get access to the file where the passwords are stored, root access. In shadowed password files the actual encrypted string are stored in /etc/shadow which is 600(rw-------) only read/writable by root. Unlike the file /etc/passwd, which is 644(rw-r--r--) so that other programs and program users can access it inorder to gain certain operating privledges. In older systems with unshadowed password files by overflowing certain cervices you could gain acess to reading the /etc/passwd file by becoming the user 'webserver' or 'ftp' or the name of whichever systems daemon you were able to become by exploiting it.

There are a few examples of different ways to get access to the shadowed file using C programming functions here .

Top
#9329 - 09/08/04 05:49 AM Re: how to crack shadowed password files?
sinetific Offline
nobody

Registered: 03/02/02
Posts: 815
Loc: Ann Arbor
Oh yeah once you get access a cracker like john the ripper should work.

Top
#9330 - 11/08/04 08:18 AM Re: how to crack shadowed password files?
sool Offline
Junior Member

Registered: 11/08/04
Posts: 1
Loc: Las Anod
Hi
Can someone crack this passwd file, cause I have hard time cracking it.

http://www31.brinkster.com/opsloppers/passwd.txt

Top
#9331 - 11/08/04 09:01 AM Re: how to crack shadowed password files?
sinetific Offline
nobody

Registered: 03/02/02
Posts: 815
Loc: Ann Arbor
The passwd file on *nix systems contains no password information on systems that use shadowed password files(all recent systems). There is nothing in that file to be cracked.

root::0:1:Superuser::
ftp::201:201:::
somali:x:225037:102:::

try looking for a file called /etc/shadow like previously stated. or maybe acutally read what was posted.

Top

Moderator:  Infinite 
Featured Member
Registered: 03/02/02
Posts: 136
Forum Stats
2148 Members
46 Forums
35077 Topics
70247 Posts

Max Online: 1567 @ 04/25/10 05:20 AM
Top Posters
UGN Security 28239
Gremelin 7193
§intå× 3255
SilentRage 1273
Ice 1146
pergesu 1136
Infinite 1041
jonconley 955
Girlie 908
unreal 860
Newest Members
Tim050, Gecko666, defghi795767, Devo60, ali
2148 Registered Users
Who's Online
0 registered (), 439 Guests and 263 Spiders online.
Key: Admin, Global Mod, Mod
Latest News


Donate
  Get Firefox!
Get FireFox!