How to break a unix or windows password with john

[thorin]

Originally Posted by .cAkEnOoB.

So..by putting the hard drive into another computer..you can crack the sam? Hmmm..as far as my knowledge..the local accounts will still be the same eventhough you boot it in another comp coz the account passwords is stored in the SAM file inside the hard drive. Or is it that my knowledge is still low?

Mind you that I am no computer expert and im just a kid that is interested in all these stuffs.

He means put it in another system as a secondary drive not as the boot device.

[.cAkEnOoB.]

I see..that helped. gonner do more on my research! build up my knowledge on computers!

[xCatx]

I don't understand the unshadow part. Can someone further explain it? Do I have to put the encrypted password that is contained in the file name "shadow" into the /etc folder?

[sorrow]

hello ...
before this i did <<unshadow /etc/passwd>> and i saw an (!) at the place of the (x)
and this is my screen after i did as you show:

root@charite3:/etc# john -single /etc/passwd /etc/shadow
Loaded 2 passwords with 2 different salts (FreeBSD MD5 [32/32])
guesses: 0 time: 0:00:00:00 100% c/s: 5242 trying: 999991969
wat to do


what would i do if i see the (!) sign

[NoobBiscUiT]

do you need a dictionary file?
did you try pointing to that?

go ahead and correct me if i'm wrong