[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <BAY106-DAV17DA65AAF787239216160F92A30@phx.gbl>
Date: Mon, 15 May 2006 20:57:52 +0100
From: "jonathan rennie" <jonathan_rennie@...mail.com>
To: <john-users@...ts.openwall.com>
Subject: RE: unrecognized encryption
Fantastic.......
I owe you a beer
!!
;-)
-----Original Message-----
From: Solar Designer [mailto:solar@...nwall.com]
Sent: 15 May 2006 19:19
To: john-users@...ts.openwall.com
Subject: Re: [john-users] unrecognized encryption
On Mon, May 15, 2006 at 10:48:04AM -0500, Jonathan Rennie wrote:
> create account admin "mickey" encrypted "595E87$tke8rNTAva8Sbwm35ctpI/"
[...]
> create account admin "goofy" encrypted "P13W97$tBW5aFepUmi2k49T2zkK50"
>
> all of these accounts were created using a password that was the same
> as the account name.....
Well, they do use the FreeBSD-derived algorithm unmodified. Here's a sed
one-liner to get your passwords into a format usable by John:
sed -n 's/:/_/g; s/^create account [^"]*"\(.\{1,\}\)" encrypted
"\([$./0-9A-Za-z]\{27,31\}\)".*$/\1:$1$\2/p' < extreme-switch-config >
passwd
The output from sed is:
mickey:$1$595E87$tke8rNTAva8Sbwm35ctpI/
minnie:$1$nB3T87$w52t8g9q5Wm3sWWxojJDx.
donald:$1$E74e87$SUB8BXN.Mrc6uFzUXzkMx1
daisie:$1$xp.s87$YV0hUcQ8JBjbFV.ZEg22b.
daffy:$1$CE.897$SW4BA9o87hTYSPnlm8mjM/
goofy:$1$P13W97$tBW5aFepUmi2k49T2zkK50
and John cracks it like this:
Loaded 6 password hashes with 6 different salts (FreeBSD MD5 [32/32])
daisie (daisie)
daffy (daffy)
goofy (goofy)
donald (donald)
mickey (mickey)
minnie (minnie)
guesses: 6 time: 0:00:00:00 100% (1) c/s: 42.85 trying: minnie
--
Alexander Peslyak <solar at openwall.com> GPG key ID: B35D3598 fp: 6429
0D7E F130 C13E C929 6447 73C3 A290 B35D 3598 http://www.openwall.com -
bringing security into open computing environments
Was I helpful? Please give your feedback here: http://rate.affero.net/solar
--
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.392 / Virus Database: 268.5.6/340 - Release Date: 15/05/2006
--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.392 / Virus Database: 268.5.6/340 - Release Date: 15/05/2006
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
