From news.beyond-the-illusion.com!news.imperium.net!news-out.internetmci.com!newsfeed.internetmci.com!199.60.229.5!newsfeed.direct.ca!torn!garnet.nbnet.nb.ca!news.unb.ca!news.unb.ca!not-for-mail Wed Oct 22 00:55:48 1997
Path: news.beyond-the-illusion.com!news.imperium.net!news-out.internetmci.com!newsfeed.internetmci.com!199.60.229.5!newsfeed.direct.ca!torn!garnet.nbnet.nb.ca!news.unb.ca!news.unb.ca!not-for-mail
From: jaf@sarastro.unb.ca (Tony Fitzgerald)
Newsgroups: comp.security.unix
Subject: Re: How to crack passwords ???
Date: 21 Oct 1997 23:36:51 -0300
Organization: University of New Brunswick, Fredericton
Lines: 42
Message-ID: <62jos3$dml@sarastro.unb.ca>
References: <01bcde45$ba4f4c40$2b2ec19d@dialup.rug.ac.be>
NNTP-Posting-Host: sarastro.unb.ca
Xref: news.beyond-the-illusion.com comp.security.unix:35376
In article <01bcde45$ba4f4c40$2b2ec19d@dialup.rug.ac.be>,
Pieter Martens wrote:
>Is there anybody who can tell me how to crack unix passwords ?
The following Perl script should crack all passwords on your system unless
you're using shadow passwords in which case it gets a little more
complicated:
#!/usr/local/bin/perl -w
open PW,"/etc/passwd" or die "$0: can't read: $!";
NXPW:
while() {
my($lgid,$crypt)= split/\:/;
my $seed= substr($crypt,0,2);
for($i=0;$i<=255;++$i) {
for($j=0;$j<=255;++$j) {
for($k=0;$k<=255;++$k) {
for($l=0;$l<=255;++$l) {
for($m=0;$m<=255;++$m) {
for($n=0;$n<=255;++$n) {
for($o=0;$o<=255;++$o) {
for($p=0;$p<=255;++$p) {
my $guess= pack('CCCCCCCC',$i,$j,$k,$l,$m,$n,$o,$p);
next unless $crypt eq crypt($guess,$seed);
print "password for $lgid is $guess\n"
next NXPW;
}
}
}
}
}
}
}
}
}
Just put the above into a file called "Cracker" then chmod the file 755
and issue the command Cracker and you're off to the races. I assume that
you're paying for the CPU usage on the system?
--
O- J. Anthony Fitzgerald, jaf@UNB.ca, http://www.unb.ca/csd/staff/jaf/ -O
|
|
Disclaimer: The file contained in the
box above or displayed in a separate window from a link in the
box above is NOT owned nor implied to
be owned by BeYoND THe iLLuSioN. Most files at BeYoND THe
iLLuSioN are originally from public Bulletin Board Systems
(BBS) which were popular in the days before the Internet or
from gopher, web, and FTP sites from the early days of the
Internet which no longer exist today. Essentially, all files
were acquired from the public domain in one for or another.
However, there have been occasions when copyright protected
material has appeared on BeYoND THe iLLuSIoN without permission
of the copyright holder. In these instances, we have and will
continue to remove the copyright protected file as soon as it
is brought to our attention. This can now be done using our Report Copyright Material form. Fill
out the form, and the webmaster will be notified of the
situation.
There are also times when files found on BeYoND THe iLLuSioN
have a real home somewhere else on the Internet. In these
instances, we will gladly replace the file with a link to its
true home whenever it is brought to our attention. If you know
of the true home of any of these files, you can use our Report Original URL form to bring it yo our
attention.
|