Suninatas Game 14

posted
read
47 words · 1 min
tags
#ctf#linux#password-cracking#shadow
contents

challenges

Game 14

Challenge: Password cracking from Linux shadow file

Tool: John the Ripper

Step 1: Extract Archive

Terminal window
tar xf evidence.tar

Step 2: Examine Shadow File

The shadow file contains a hashed password entry:

suninatas:$6$QlRlqGhj$BZoS9PuMMRHZZXz1Gde99W01u3kD9nP/zYtl8O2dsshdnwsJT/1lZXsLar8asQZpqTAioiey4rKVpsLm/bqrX/:15427:0:99999:7:::

Step 3: Prepare for Cracking

Combine passwd and shadow files:

Terminal window
unshadow passwd shadow > unshadow

Step 4: Crack Password

Use John the Ripper with a wordlist:

Terminal window
john unshadow --wordlist=~/wordlists/rockyou.txt

Output:

iloveu1         (suninatas)

iloveu1