1

For migration purposes i need to get the plaintext password for all our accounts, stored in the shadow file.

Our system uses usernames in the format "firstname.lastname" and password is either "firstname + single_number + single_letter" or "lastname + single_number + single_letter", like "firstname3p" or "lastname3p"

What is the correct way to use filters to extract firstname or lastname and try every combination of number + letter on them?

closed as off-topic by schroeder Feb 27 at 13:47

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – schroeder
If this question can be reworded to fit the rules in the help center, please edit the question.

  • The correct way would be to use this opportunity to stop using easily guessable passwords. – A. Hersean Feb 27 at 10:49
  • This is more of a programming question than a security question. – schroeder Feb 27 at 13:47
  • May I use this as an example of "How NOT to do things"? – user10216038 Feb 28 at 1:41
  • Exactly. It's a legacy system and i am changing it. – tilkov Feb 28 at 6:52
0

In my opinion the best way to do that is creating a wordlist with all the possibilities using a script for example and then using that wordlist in John the Ripper

Not the answer you're looking for? Browse other questions tagged or ask your own question.