ConradJones Posted March 30, 2013 Posted March 30, 2013 Hi Any good tools for attempting to find ssh password? I know roughly what the root password is i.e. is either 1 of 2 words and then there are some numbers but not sure. I can't do single user mode as some dimwit has unplugged the ILO switch and i need to do this before people are in monday. any ideas on tools?
SYNACK Posted March 30, 2013 Posted March 30, 2013 Jack the Ripper might be able to do this, it is the brute force tool to use against the /passwd folder, might have that feature.
Arthur Posted March 30, 2013 Posted March 30, 2013 Jack the Ripper might be able to do this John the Ripper? I don't think @ConradJones would find Jack the Ripper helpful! 1
ConradJones Posted March 30, 2013 Author Posted March 30, 2013 john the ripper was the program i was thinking of with mangling rules but I think it only works on hashes? i want to brute attack the ssh login over the network
Arthur Posted March 30, 2013 Posted March 30, 2013 There should be something in Kali Linux that can do what you want (ssh_login perhaps?). 1
ConradJones Posted March 30, 2013 Author Posted March 30, 2013 i've got hydra on backtrack, that seems to do the cracking i'm just wondering now if i can get either john or another program to generate a password list based on some words and rules i specify
SYNACK Posted March 30, 2013 Posted March 30, 2013 John the Ripper? I don't think @ConradJones would find Jack the Ripper helpful! Thanks, I don't mess with linux that much.
Arthur Posted March 30, 2013 Posted March 30, 2013 another program to generate a password list based on some words and rules I specify Crunch or RSMangler? I don't mess with linux that much. I normally use the Windows version.
ConradJones Posted March 30, 2013 Author Posted March 30, 2013 (edited) There should be something in Kali Linux that can do what you want (ssh_login perhaps?). metasploit u linked to worked. on backtrack, password is def wrong on one box as it found it on the other two Edited March 30, 2013 by ConradJones
Arthur Posted March 30, 2013 Posted March 30, 2013 metasploit u linked to worked. Excellent news! password is def wrong on one box as it found it on the other two Does that mean someone else has changed it?
ConradJones Posted March 30, 2013 Author Posted March 30, 2013 Excellent news! Does that mean someone else has changed it? not sure currently.
tom_newton Posted March 30, 2013 Posted March 30, 2013 What are you trying to crack? If its a linux box you have physical access to, boot into single user mode and sort it out. Also bear in mind that modern linux discourages the use of "root" - so it may be that you've a local account on there and need to su?
ConradJones Posted March 30, 2013 Author Posted March 30, 2013 What are you trying to crack? If its a linux box you have physical access to, boot into single user mode and sort it out. Also bear in mind that modern linux discourages the use of "root" - so it may be that you've a local account on there and need to su? See Below I can't do single user mode as some dimwit has unplugged the ILO switch and i need to do this before people are in monday. its esx 4.1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now