×

Loading...
Ad by
  • 最优利率和cashback可以申请特批，好信用好收入offer更好。请点链接扫码加微信咨询，Scotiabank -- Nick Zhang 6478812600。
Ad by
  • 最优利率和cashback可以申请特批，好信用好收入offer更好。请点链接扫码加微信咨询，Scotiabank -- Nick Zhang 6478812600。

@Calgary

1,2answers, 3见上,但觉得最可靠的方法是by inode

pipibug(golf)
本文发表在 rolia.net 枫下论坛Passwords aren't encrypted, but hashed. The distinction is that there
isn't any way to decrypt the data in the shadow file to obtain the
actual password. The password which is entered by the user is
concatenated with the salt and the result is then hashed. The hash is
compared against the one from the shadow (or passwd) file.

In the above, "$1$" indicates that the entry is hashed using MD5 (as
opposed to the traditional DES hash), "shGNybY9" is the salt, and
"L)J1gwitzN6LoeS0pMpNc/" is the base64-encoded hash (an MD5 hash is a128-bit value).

2. In the /etc/shadow file how is the password "!za1aId0hfZ2IA" encrypted and what significance does this password hold?

That is a DES hashed password, where "za" is the salt and
"1aId0hfZ2IA" is the base64-encoded DES hash (DES hashes are 64 bits, although only 56 bits are significant). The leading "!" indicates that
the account is locked (it also ensures that any attempt to validate a
password will fail, regardless of the actual password which is
entered).更多精彩文章及讨论，请光临枫下论坛 rolia.net
(#2173424@0)
Last Updated: 2005-3-11
This post has been archived. It cannot be replied.
Report

Replies, comments and Discussions:

  • 工作学习 / IT技术讨论 / 求教几个UNIX技术问题。 -ivanliuxin(Ivan); 2005-3-11 {281} (#2172858@0)
    1。In the /etc/shadow file how is the password "$1$shGNybY9$L)J1gwitzN6LoeS0pMpNc/" encrypted?
    2. In the /etc/shadow file how is the password "!za1aId0hfZ2IA" encrypted and what significance does this password hold?
    3. How would you create and remove a file named "--help"?
    • 没有人知道吗？ -ivanliuxin(Ivan); 2005-3-11 (#2172926@0)
      • 1,2 不知道, 3用script. -jack263(网球爱好者); 2005-3-11 (#2172952@0)
        • thanks anyway. Need Unix Expert help. -ivanliuxin(Ivan); 2005-3-11 (#2172967@0)
        • 3用\ -pipibug(golf); 2005-3-11 (#2172969@0)
          • u mean just "\--help"?! -ivanliuxin(Ivan); 2005-3-11 (#2172973@0)
            • \-\- -pipibug(golf); 2005-3-11 (#2172985@0)
        • Could u give me the details? -ivanliuxin(Ivan); 2005-3-11 (#2172970@0)
          • 你要知道password 干嘛？ -pipibug(golf); 2005-3-11 (#2172972@0)
            • 是面试的题阿，没办法。 -ivanliuxin(Ivan); 2005-3-11 (#2172978@0)
              • 1,2问题看不懂. -pipibug(golf); 2005-3-11 (#2172988@0)
              • 3. touch ./--help; rm -f ./--help -skywriting(天书); 2005-3-11 (#2173035@0)
                • echo > --help 也行 -skywriting(天书); 2005-3-11 (#2173160@0)
    • 1.encrypted 2.done by system 3.touch --help and rm --help? not sure -taile(taile); 2005-3-11 (#2172975@0)
      • do u think Q3 should be "touch \--help" and "rm \--help"? -ivanliuxin(Ivan); 2005-3-11 (#2172983@0)
        • i'm not sure. \ was used in RE, not sure for the system. -taile(taile); 2005-3-11 (#2172993@0)
    • 1.好像是md5 吧。不能还原的。 2和1 有什么区别阿？看不懂。 3。rm -- --help -wawawawa(baby); 2005-3-11 (#2173122@0)
    • 2: first two letters are the "salt"(the seed for encryption), rest letters are encrypted xxx (MI MA). 3: try quote the file name: touch "--help" or touch '--help', -647i(#2153402);(#2323); 2005-3-11 {111} (#2173127@0)
      in most time single quote doesn't explain the letter in cmd line.

      I don't have access to unix, try urself.
      • "--help" 这个不灵。 -holdon(try again); 2005-3-11 (#2173132@0)
        • try single quote -647i(#2153402);(#2323); 2005-3-11 (#2173136@0)
          • 什么quote都不灵。就是 rm -- --help 和 rm ./--help 可以。 -holdon(try again); 2005-3-11 (#2173154@0)
    • 像3这种问题，面试时还真答不出来。 但是有环境做做实验看看帮助就出来了。rm \--help 不对，rm -- --help. rm ./--help 这个高。 -holdon(try again); 2005-3-11 (#2173128@0)
      • if use escape character, the cmd line will be touch \-\-help -647i(#2153402);(#2323); 2005-3-11 (#2173139@0)
        • 这个不对。 -holdon(try again); 2005-3-11 (#2173152@0)
        • 反斜杠是标准,放之四海而皆准.1, 2 两题是变态,谁他妈的吃保了撑的做这个. -pipibug(golf); 2005-3-11 (#2173292@0)
          • 当然要带path. -pipibug(golf); 2005-3-11 (#2173390@0)
      • or if there is only one file end with help. u can try touch *help -647i(#2153402);(#2323); 2005-3-11 (#2173141@0)
    • 1. it is crypted by cmd "crypt", not all the system set that cmd as default installtion. cmd crypt references share library crypt.so, which is standard installation. -647i(#2153402);(#2323); 2005-3-11 {118} (#2173135@0)
      cmd passwd, which generate and change password to file /etc/passwd, also reference the .so file directly or indirectly
    • 谢谢大家，不过还是没有标准答案阿。 -ivanliuxin(Ivan); 2005-3-11 (#2173151@0)
      • 关于口令加密的问题我是这样理解地 -zhu8jie(zhu8jie); 2005-3-11 {293} (#2173188@0)
        加密的传统方法应该是des, 或其衍生和加强方法，但是采用用户密码明文作为秘钥，所以要解密是不可能地。
        用户登录时，将所输入的密码采用同样的方式加密一遍，然后再和passwd或shadow里的加密后的字串比较，如果一致，则密码有效。
        这种情况下对密码的破解都是采用暴力破解，你可以到网上去搜一下相应的黑客程序。
      • 1,2answers, 3见上,但觉得最可靠的方法是by inode -pipibug(golf); 2005-3-11 {1045} (#2173424@0)
        本文发表在 rolia.net 枫下论坛Passwords aren't encrypted, but hashed. The distinction is that there
        isn't any way to decrypt the data in the shadow file to obtain the
        actual password. The password which is entered by the user is
        concatenated with the salt and the result is then hashed. The hash is
        compared against the one from the shadow (or passwd) file.

        In the above, "$1$" indicates that the entry is hashed using MD5 (as
        opposed to the traditional DES hash), "shGNybY9" is the salt, and
        "L)J1gwitzN6LoeS0pMpNc/" is the base64-encoded hash (an MD5 hash is a128-bit value).

        2. In the /etc/shadow file how is the password "!za1aId0hfZ2IA" encrypted and what significance does this password hold?

        That is a DES hashed password, where "za" is the salt and
        "1aId0hfZ2IA" is the base64-encoded DES hash (DES hashes are 64 bits, although only 56 bits are significant). The leading "!" indicates that
        the account is locked (it also ensures that any attempt to validate a
        password will fail, regardless of the actual password which is
        entered).更多精彩文章及讨论，请光临枫下论坛 rolia.net
        • thanks a lot. -ivanliuxin(Ivan); 2005-3-12 (#2173765@0)
    • 这样 -oasis(oasis); 2005-3-11 {142} (#2173249@0)
      C有一个加密的函数， crypt(), 这种加密是不可逆的，你只能通过函数和你的密码得到加密的密码和储存的密码比较。

      remove file --help

      rm ./--help
    • thanks a million to all of you. -ivanliuxin(Ivan); 2005-3-12 (#2173771@0)
    • 谢谢大家，我想大家最开始可能和我一样都没看明白。我刚才又重新读了一遍题目，发现1、2题并不是要大家找出来password，而是问用什么样的加密方法。谢谢pipibug(golf)最后的回答。 -ivanliuxin(Ivan); 2005-3-12 (#2173781@0)
      • 我的答案也是翻出来的,凭良心说,如果是一个interview问这种问题, 是偏了,知道用md5还是DES无意义,不同的平台也不见得就一样. 3还可以忍受. 也谢谢你贴出来,大家都有提高. -pipibug(golf); 2005-3-12 (#2173854@0)

More Topics

  • 老程序员第一次用copilot的一点点体会
  • 现在社区游泳池招救生员巡逻，过一会还要不停的点人头，这工作是否很快就被AI代替了，装一个摄像头后面是AI处理系统，这样只招一个等着救人就行了，人头沉下水一定时间立马强光照射，还可以分析水下人的状况来判断是否溺水等
  • 新冠疫苗引发心肌炎? 最新研究这样看
  • 这道几何题有解吗?
  • SAM 2 Demo
    • 枫下论坛主坛 /  工作学习 /  IT技术讨论