decrypting htpasswd

Benjamin J. Weiss benjamin at birdvet.org
Mon Jan 24 18:13:36 UTC 2005


Mulley, Nikhil wrote:

>[I am not talking abt Cracking..] This is however to say that I ensure my security and warn others abt their security as well..
>as earlier said ..the password file has two fields...
>Username:Password
>the password is in DES (hashed)Encryption format..
>so I think there is a way to Rip it with John...
>  
>
1) If you intentionally acquired this file without the permission of the 
server's owner, you have violated federal law.
2) If you accidentally acquired this file and then attempt to crack the 
password, you have violated federal law.

If you truly came upon this file accidentally and you want to warn the 
owners about their security, simply give them a copy of the file you 
captured and then delete it.

I work for a state law-enforcement agency.  If you wish assistance in 
contacting the server owners, please contact me off-list.

Benjamin Weiss




More information about the redhat-list mailing list