For migration purposes i need to get the plaintext password for all our accounts, stored in the shadow file.

Our system uses usernames in the format "firstname.lastname" and password is either "firstname + single_number + single_letter" or "lastname + single_number + single_letter", like "firstname3p" or "lastname3p"

What is the correct way to use filters to extract firstname or lastname and try every combination of number + letter on them?

  • The correct way would be to use this opportunity to stop using easily guessable passwords.
    – A. Hersean
    Feb 27, 2019 at 10:49
  • This is more of a programming question than a security question.
    – schroeder
    Feb 27, 2019 at 13:47
  • May I use this as an example of "How NOT to do things"? Feb 28, 2019 at 1:41
  • Exactly. It's a legacy system and i am changing it.
    – tilkov
    Feb 28, 2019 at 6:52

1 Answer 1


In my opinion the best way to do that is creating a wordlist with all the possibilities using a script for example and then using that wordlist in John the Ripper

Not the answer you're looking for? Browse other questions tagged .