/etc/shadow
[-rw-r----- 1 root shadow · you really shouldn't be able to read this]
guest@wopr.defunc.norad:~$ cat /etc/shadow
cat: /etc/shadow: Permission denied
guest@wopr.defunc.norad:~$ sudo !!
[sudo] password for guest: ******** guest is not in the sudoers file. This incident will be reported. ... to whom, exactly? the sysadmin is me, and i'm busy.
root@wopr.defunc.norad:~# cat /etc/shadow # via CVE-1983-0603 "joshua backdoor". obviously.
root:$6$w0pr$n1c3.Try.But.Th1s.1s.N0t.Th3.H4sh.Y0u.4r3.L00k1ng.F0r/:19876:0:99999:7::: daemon:*:19876:0:99999:7::: bin:*:19876:0:99999:7::: sys:*:19876:0:99999:7::: nobody:*:19876:0:99999:7::: florian:$y$j9T$c0d3k1ll3r$h4rdw4r3.k3y.0nly.p4ssw0rds.4r3.s0.1999/:19876:0:99999:7::: joshua:$1$NORAD$4.str4ng3.g4m3/th3.0nly.w1nn1ng.m0v3:4533:0:99999:7::: falken:!:4533:0:99999:7::: # account locked since 1983. presumed dead. (he isn't.) mrrobot:$6$fs0c13ty$h3ll0.fr13nd.th4ts.l4m3.m4yb3.1.sh0uld.g1v3.y0u.4.n4m3/:19876:0:99999:7::: zerocool:$1$gibson$h4ck.th3.pl4n3t.h4ck.th3.pl4n3t.h4ck.th3.pl4n3t/:9600:0:99999:7::: captcrunch:$2600$hz$wh1stl3.1nt0.th3.r3c31v3r.s31z3.th3.trunk/:3650:0:99999:7::: nova-x:!!$x$cr3d3nt14ls.n3v3r.r34ch.th3.m0d3l.4nd.n3v3r.h3r3/:20000:0:99999:7::: intern:password123:20000:0:1:7::: # expires daily. still the same password every day. guest:$6$you$4r3.r34d1ng.th1s.r1ght.n0w.h1.th3r3/:20000:0:99999:7:::
root@wopr.defunc.norad:~# hashcat -m 1800 shadow rockyou.txt
hashcat (v6.6.6) starting... Session..........: wopr Status...........: Running Hash.Mode........: 1800 (sha512crypt $6$, SHA512 (Unix)) Speed.#1.........: 13 H/s (running on a Motorola 68040 @ 25MHz) Recovered........: 1/14 (7.14%) -- intern:password123 (that one doesn't count) Time.Estimated...: heat death of the universe (+/- a tuesday) PRO TIP: all of the above are fake. real credentials live in a hardware key, not on a website. nice try though. genuinely. we respect the hustle.
root@wopr.defunc.norad:~# cd ~