弱口令检测john工具

安装工具

tar -zvxf john-1.8.0.tar.tar
cd john-1.8.0/rc
make clean linux-x86-64
cd /root/john-1.8.0/run

准备密码文件

cp /etc/shadow ./shadow.txt

开始弱口令检测

[root@localhost run]# ./john shadow.txt
Loaded 8 password hashes with 8 different salts (crypt, generic crypt(3) [?/64])
Remaining 3 password hashes with 3 different salts
Press 'q' or Ctrl-C to abort, almost any other key for status
.......
.......
1g 0:00:01:30 0% 2/3 0.01110g/s 259.5p/s 262.7c/s 262.7C/s 123456..pepper
1234             (lucy)
1234             (amber)
1234             (user1)
1234             (user2)
.......

破解下面了表中用户的密码

[root@localhost run]# ./john --show shadow.txt 
amber:1234:17618:0:99999:7:::
user1:1234:17618:0:99999:7:::
user2:1234:17618:0:99999:7:::
user3:1234:17618:0:99999:7:::
lucy:1234:17621:0:99999:7:::

#字典式暴力破解

#将一些可能经常用到的密码，放置到密码文件password.list中

[root@localhost run]# ./john --wordlist=./password.lst ./shadow.txt
#破解记录会默认存放在john.pot文件中
[root@localhost run]# cat john.pot 
$6$OlTMw.Mh$fHRzPafRPFPs.8t9pA5Og2PSSwnFQdHt7gqsOWchkS1dgL5PhjefCRxGQBEol1cTjZvASAqJHXuwHdkh/c7kJ.:hello,word