30 lines
665 B
Markdown
30 lines
665 B
Markdown
|
# Authentication
|
||
|
|
## Download Wordlist
|
||
|
|
```sh
|
||
|
|
wget https://github.com/brannondorsey/naive-hashcat/releases/download/data/rockyou.txt -O rockyou.txt
|
||
|
|
```
|
||
|
|
|
||
|
|
## Password Cracking
|
||
|
|
Crack Password using `john`:
|
||
|
|
|
||
|
|
```sh
|
||
|
|
#!/bin/bash
|
||
|
|
john --wordlist=./rockyou.txt --format=crypt <(echo '$1$randsalt$1FzqFfQs5tCdStIZl215/.')
|
||
|
|
```
|
||
|
|
|
||
|
|
As a result we get the password: `topgunner2k7`
|
||
|
|
|
||
|
|
## KeePass Cracking
|
||
|
|
Download KeePass database:
|
||
|
|
|
||
|
|
<https://courses.fit.cvut.cz/BIE-ASB/tutorials/files/steve_passwords.kdbx>
|
||
|
|
|
||
|
|
Crack KeePass database password:
|
||
|
|
|
||
|
|
```sh
|
||
|
|
#!/bin/bash
|
||
|
|
john --wordlist=./rockyou.txt <(keepass2john steve_passwords.kdbx)
|
||
|
|
```
|
||
|
|
|
||
|
|
As a result, we get the password: `dancingdiva11195`
|