How to Crack LInux Password Using John the Ripper

We have get /etc/passwd and /etc/shadow in the last article Privilege Escalation (Step by Step to get Linux username and Password) in Backtrack 5

Now we try to crack it. The first step is save the two files in txt files. In this case we will save /etc/passwd in pasword.txt and /etc/shadow in shadow.txt.

Then combine the two files by using ./unshadow command.


root@bt:/pentest/passwords/john# ./unshadow pasword.txt shadow.txt >> crack.txt
root@bt:/pentest/passwords/john# ./jhon-mmx crack.txt

The next step is crack the crack.txt using john

root@bt:/pentest/passwords/john# john crack.txt
Loaded 5 password hashes with 5 different salts (FreeBSD MD5 [32/32])
guesses: 0  time: 0:00:00:47 25.23% (2) (ETA: Wed Feb  1 10:23:59 2012)  c/s: 3943  trying: olivier9