Penetration Testing mailing list archives

Re: htpasswd decrypt


From: Miguel Gonzalez <miguel_3_gonzalez () yahoo es>
Date: Sun, 20 Jun 2010 07:48:55 -0700 (PDT)

My fault, I was following some more complicated instructions

Thanks,

Miguel

--- El dom, 20/6/10, Christine Kronberg <seeker () shalla de> escribió:

De: Christine Kronberg <seeker () shalla de>
Asunto: Re: htpasswd decrypt
Para: "Jacky Jack" <jacksonsmth698 () gmail com>
CC: "Miguel González Castaños" <miguel_3_gonzalez () yahoo es>, pen-test () securityfocus com
Fecha: domingo, 20 de junio, 2010 06:10

  Hi,


I haven't been aware of it, too.
If you know it, let me know.

  Why don't you just try? Took me less than two
minutes:

home template # htpasswd -cbm testfile test test
Adding password for user test

home template # cat testfile
test:$apr1$qgW5z/..$7Y85TQKs.nBK6GbO.VqfK/

home template # john testfile
Created directory: /root/.john
Loaded 1 password hash (Apache MD5 [32/32])
test         
   (test)
guesses: 1  time: 0:00:00:00 100% (1)  c/s:
25.00  trying: test

  So the answer is: yes, it works.

  Cheers,

  Christine Kronberg.







------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------


Current thread: