[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20061210124118.GA3854@openwall.com>
Date: Sun, 10 Dec 2006 15:41:18 +0300
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: OpenUnix 8 hash format is not the normal DES?
On trying to locate the "real" password hashes (for passwords of more
than 8 characters long):
On Sat, Dec 09, 2006 at 01:02:01AM -0300, Danett song wrote:
> Files having the string root I looked without sucess. Any other trick for what look?
Well, I would either trace the syscalls that the "passwd" program is
making (when run by root as "passwd username") or reverse-engineer parts
of it (or, more likely, of a library that it uses). Alternatively, the
same approaches may be applied to any daemon that does password
authentication or to the "login" program. Running "strings" on some
program binaries or library files might be enough.
I haven't touched a SCO'ish system for many years, so I simply don't
know what changes they have made to password hash storage since then.
--
Alexander Peslyak <solar at openwall.com>
GPG key ID: 5B341F15 fp: B3FB 63F4 D7A3 BCCC 6F6E FC55 A2FC 027C 5B34 1F15
http://www.openwall.com - bringing security into open computing environments
Was I helpful? Please give your feedback here: http://rate.affero.net/solar
--
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
