Chinadu`s Blog

来源：iCNPunk

测试环境，RHEL5系统，系统root帐户一个，自建帐户icnpunk一个。

[root@localhost run]# ./unshadow /etc/passwd /etc/shadow > /tmp/passwd

[root@localhost run]# vim /tmp/passwd
删除没有用的行，只剩下需要破解的账号：

root:$1$aUXH7Z3Y$fec8RLXoAkEdn41UmvMYj.:0:0:root:/root:/bin/bash
icnpunk:$1$CmzD3ab0$qp.JmpXa8d3IIBYrltWDb/:500:500::/home/icnpunk:/bin/bash

我加入了自己的真实密码到password.lst文件里

[root@localhost run]# echo 1234567 >> password.lst

[root@localhost run]# ./john –wordlist=password.lst /tmp/passwd
Loaded 2 password hashes with 2 different salts (FreeBSD MD5 [32/32])
1234567          (root)
1234567          (icnpunk)
guesses: 2  time: 0:00:00:01 100%  c/s: 5920  trying: 1234567