Hack Security Pro.pdf - Index of

B) The Unix passwd file
On Unix systems, the encrypting system is univalent. Files storing passwords are in most distributions
in the “/etc/”” directory under the name “passwd”.
In more recent versions of Unix, the passwd file has been divided into 2 files, because the passwd file
on older versions could be read by anyone, enabling a user with no particular rights to obtain the
stored passwords' hash.
root:6Tgy1Gs.fTrfS:0:1:Admin:/:/sbin/sh
john:K6fRti29nFrsY:1001:10::/usr/john:/bin/sh
sophie:H74jGhhTDsE2i:1002:10::/usr/sophie:/bin/sh
paul:fTqzOyHs88sfZ:1003:10::/usr/paul:/bin/sh
The format is:
login : pass : UID : GID : complete name : personal directory : shell
Nowadays, all passwords are saved in a second file called shadow. The shadow file is only accessible
if you have root status on the machine. Do note that the passwd file still enables the hacker to know
what the system users' logins are, so as to create a dictionary.
Now, on most Unix systems, passwords have been replaced by “x” in the passwd file:
root:x:0:1:Admin:/:/sbin/sh
john:x:1001:10::/usr/john:/bin/sh
sophie:x:1002:10::/usr/sophie:/bin/sh
paul:x:1003:10::/usr/paul:/bin/sh
and in the shadow file:
root:6Tgy1Gs.fTrfS:11604::::::
john:K6fRti29nFrsY:::::::
sophie:H74jGhhTDsE2i:::::::
paul:fTqzOyHs88sfZ:::::::
The format is:
login : pass : date : min : max : warning : expiration : deactivation
As for NT, there is software that can crack Unix passwords.
The Hackademy DMP -173/209- SYSDREAM