john password_file # John the Ripper john -show password_file # Read the cracked passwds |
SSH client with a sniffer on a multi-user system:
reads user name, password and the destination host.
SSH brute force attack guesses user credentials.
awk -F: '$2 == "" { print $1, "has no password!" }' /etc/shadow
awk -F: '$3 == 0 { print $1, "is a superuser!" }' /etc/passwd
|
find /dir -xdev -perm /o=w ! \( -type d -perm /o=t \) ! -type l -print |
find /dir -xdev -type f -perm /u=s,g=s -print |