EXPLOIT WEBMIN AND CRACKING PASSWORD USING JOHN THE RIPPER (part 2)

Day 6 


Tools :

•  JTP (John The Ripper)

Target :

• Cracking password after exploit /etc/shadow

In the post EXPLOIT WEBMIN USING EXPLOITdb TO HAVING PRIVILEGE ESCALATION (part1) is about how to use exploitdb to exploit victim, the goal from it is list user account (username and password), Now in this sessions i will try to cracking the password from the goal. Read the readme.

Readme JTP

Lets load user account in the directory /home to crack the password

Cracking goalexploitdb

Password unsuccesfully cracked...try againt with other file name.

Cracking againts

Cracking one by one

Unsuccesfully.....Password not cracked .....Why?.....

Because the table of dictionary wordlist in the John The Ripper data not exist....but its post is process and how to cracking password using John the ripper....not all of it can be easy to disassemble