Re: [cobalt-security] booting password crackers...

[Mike Vanecek <nospam99@xxxxxxxxxxxx>]

On Sun, 28 May 2000 19:49:40 +0200, ChaosIndustries <chaosindustries@xxxxxx>
wrote:

:>Uploaded a sample passwd file (see down) to
:>
:>http://www.verkackt.de/~verkackt/defense

Got it, thank you; btw, it should be url

      http://www.verkackt.de/~verkackt/defence/

:>
:>This will be a typical passwd file with the cobalt structure when you care
:>that unshadowed.
:>
:>The encrypted Passwords where when you give them a unixpassword cracker
:>(like crackerjack oder John the Ripper) will be in listed order:
:>hahaha really think weare sooo damn stupid
:>
:>When this file will bruteforced the hahaha pass (is for root) will come out
:>at last (cause the longest one).

Neat!

:>Running on a P150 maschine the cracker will need arround 3 days to crack
:>this file.
:>
:>Crackers will have fun - 2 days for a haha ;)
:>
:>You can use other passwords, easy generate them at
:>
:>http://home.ici.net/cust_pages/sitei/password.html


Why is it that when I use this url to generate passwords for userid root and
password "hahaha really think weare sooo damn stupid" that I get different
results each time?:

root:upWhLNhcx8XnA
root:fdEFJIU.vqXV6

Obviously, the encryption algorithm has some randomness to it??

I would like to have the cgi script that he uses to generate the passwords.
Could install the form locally then.

:>
:>The other stuff i have to comment them a bit so that you would't need
:>2 days to lookup what i mean while writing that.

Thanks, let me know when it is ready.