×

Loading...
Ad by
  • 推荐 OXIO 加拿大高速网络，最低月费仅$40. 使用推荐码 RCR37MB 可获得一个月的免费服务
Ad by
  • 推荐 OXIO 加拿大高速网络，最低月费仅$40. 使用推荐码 RCR37MB 可获得一个月的免费服务

@Florida

1,2answers, 3见上,但觉得最可靠的方法是by inode

pipibug(golf)
本文发表在 rolia.net 枫下论坛Passwords aren't encrypted, but hashed. The distinction is that there
isn't any way to decrypt the data in the shadow file to obtain the
actual password. The password which is entered by the user is
concatenated with the salt and the result is then hashed. The hash is
compared against the one from the shadow (or passwd) file.

In the above, "$1$" indicates that the entry is hashed using MD5 (as
opposed to the traditional DES hash), "shGNybY9" is the salt, and
"L)J1gwitzN6LoeS0pMpNc/" is the base64-encoded hash (an MD5 hash is a128-bit value).

2. In the /etc/shadow file how is the password "!za1aId0hfZ2IA" encrypted and what significance does this password hold?

That is a DES hashed password, where "za" is the salt and
"1aId0hfZ2IA" is the base64-encoded DES hash (DES hashes are 64 bits, although only 56 bits are significant). The leading "!" indicates that
the account is locked (it also ensures that any attempt to validate a
password will fail, regardless of the actual password which is
entered).更多精彩文章及讨论，请光临枫下论坛 rolia.net
(#2173424@0)
Last Updated: 2005-3-11
This post has been archived. It cannot be replied.
Report

Replies, comments and Discussions:

  • 工作学习 / IT技术讨论 / 求教几个UNIX技术问题。 -ivanliuxin(Ivan); 2005-3-11 {281} (#2172858@0)
    1。In the /etc/shadow file how is the password "$1$shGNybY9$L)J1gwitzN6LoeS0pMpNc/" encrypted?
    2. In the /etc/shadow file how is the password "!za1aId0hfZ2IA" encrypted and what significance does this password hold?
    3. How would you create and remove a file named "--help"?
    • 没有人知道吗？ -ivanliuxin(Ivan); 2005-3-11 (#2172926@0)
      • 1,2 不知道, 3用script. -jack263(网球爱好者); 2005-3-11 (#2172952@0)
        • thanks anyway. Need Unix Expert help. -ivanliuxin(Ivan); 2005-3-11 (#2172967@0)
        • 3用\ -pipibug(golf); 2005-3-11 (#2172969@0)
          • u mean just "\--help"?! -ivanliuxin(Ivan); 2005-3-11 (#2172973@0)
            • \-\- -pipibug(golf); 2005-3-11 (#2172985@0)
        • Could u give me the details? -ivanliuxin(Ivan); 2005-3-11 (#2172970@0)
          • 你要知道password 干嘛？ -pipibug(golf); 2005-3-11 (#2172972@0)
            • 是面试的题阿，没办法。 -ivanliuxin(Ivan); 2005-3-11 (#2172978@0)
              • 1,2问题看不懂. -pipibug(golf); 2005-3-11 (#2172988@0)
              • 3. touch ./--help; rm -f ./--help -skywriting(天书); 2005-3-11 (#2173035@0)
                • echo > --help 也行 -skywriting(天书); 2005-3-11 (#2173160@0)
    • 1.encrypted 2.done by system 3.touch --help and rm --help? not sure -taile(taile); 2005-3-11 (#2172975@0)
      • do u think Q3 should be "touch \--help" and "rm \--help"? -ivanliuxin(Ivan); 2005-3-11 (#2172983@0)
        • i'm not sure. \ was used in RE, not sure for the system. -taile(taile); 2005-3-11 (#2172993@0)
    • 1.好像是md5 吧。不能还原的。 2和1 有什么区别阿？看不懂。 3。rm -- --help -wawawawa(baby); 2005-3-11 (#2173122@0)
    • 2: first two letters are the "salt"(the seed for encryption), rest letters are encrypted xxx (MI MA). 3: try quote the file name: touch "--help" or touch '--help', -647i(#2153402);(#2323); 2005-3-11 {111} (#2173127@0)
      in most time single quote doesn't explain the letter in cmd line.

      I don't have access to unix, try urself.
      • "--help" 这个不灵。 -holdon(try again); 2005-3-11 (#2173132@0)
        • try single quote -647i(#2153402);(#2323); 2005-3-11 (#2173136@0)
          • 什么quote都不灵。就是 rm -- --help 和 rm ./--help 可以。 -holdon(try again); 2005-3-11 (#2173154@0)
    • 像3这种问题，面试时还真答不出来。 但是有环境做做实验看看帮助就出来了。rm \--help 不对，rm -- --help. rm ./--help 这个高。 -holdon(try again); 2005-3-11 (#2173128@0)
      • if use escape character, the cmd line will be touch \-\-help -647i(#2153402);(#2323); 2005-3-11 (#2173139@0)
        • 这个不对。 -holdon(try again); 2005-3-11 (#2173152@0)
        • 反斜杠是标准,放之四海而皆准.1, 2 两题是变态,谁他妈的吃保了撑的做这个. -pipibug(golf); 2005-3-11 (#2173292@0)
          • 当然要带path. -pipibug(golf); 2005-3-11 (#2173390@0)
      • or if there is only one file end with help. u can try touch *help -647i(#2153402);(#2323); 2005-3-11 (#2173141@0)
    • 1. it is crypted by cmd "crypt", not all the system set that cmd as default installtion. cmd crypt references share library crypt.so, which is standard installation. -647i(#2153402);(#2323); 2005-3-11 {118} (#2173135@0)
      cmd passwd, which generate and change password to file /etc/passwd, also reference the .so file directly or indirectly
    • 谢谢大家，不过还是没有标准答案阿。 -ivanliuxin(Ivan); 2005-3-11 (#2173151@0)
      • 关于口令加密的问题我是这样理解地 -zhu8jie(zhu8jie); 2005-3-11 {293} (#2173188@0)
        加密的传统方法应该是des, 或其衍生和加强方法，但是采用用户密码明文作为秘钥，所以要解密是不可能地。
        用户登录时，将所输入的密码采用同样的方式加密一遍，然后再和passwd或shadow里的加密后的字串比较，如果一致，则密码有效。
        这种情况下对密码的破解都是采用暴力破解，你可以到网上去搜一下相应的黑客程序。
      • 1,2answers, 3见上,但觉得最可靠的方法是by inode -pipibug(golf); 2005-3-11 {1045} (#2173424@0)
        本文发表在 rolia.net 枫下论坛Passwords aren't encrypted, but hashed. The distinction is that there
        isn't any way to decrypt the data in the shadow file to obtain the
        actual password. The password which is entered by the user is
        concatenated with the salt and the result is then hashed. The hash is
        compared against the one from the shadow (or passwd) file.

        In the above, "$1$" indicates that the entry is hashed using MD5 (as
        opposed to the traditional DES hash), "shGNybY9" is the salt, and
        "L)J1gwitzN6LoeS0pMpNc/" is the base64-encoded hash (an MD5 hash is a128-bit value).

        2. In the /etc/shadow file how is the password "!za1aId0hfZ2IA" encrypted and what significance does this password hold?

        That is a DES hashed password, where "za" is the salt and
        "1aId0hfZ2IA" is the base64-encoded DES hash (DES hashes are 64 bits, although only 56 bits are significant). The leading "!" indicates that
        the account is locked (it also ensures that any attempt to validate a
        password will fail, regardless of the actual password which is
        entered).更多精彩文章及讨论，请光临枫下论坛 rolia.net
        • thanks a lot. -ivanliuxin(Ivan); 2005-3-12 (#2173765@0)
    • 这样 -oasis(oasis); 2005-3-11 {142} (#2173249@0)
      C有一个加密的函数， crypt(), 这种加密是不可逆的，你只能通过函数和你的密码得到加密的密码和储存的密码比较。

      remove file --help

      rm ./--help
    • thanks a million to all of you. -ivanliuxin(Ivan); 2005-3-12 (#2173771@0)
    • 谢谢大家，我想大家最开始可能和我一样都没看明白。我刚才又重新读了一遍题目，发现1、2题并不是要大家找出来password，而是问用什么样的加密方法。谢谢pipibug(golf)最后的回答。 -ivanliuxin(Ivan); 2005-3-12 (#2173781@0)
      • 我的答案也是翻出来的,凭良心说,如果是一个interview问这种问题, 是偏了,知道用md5还是DES无意义,不同的平台也不见得就一样. 3还可以忍受. 也谢谢你贴出来,大家都有提高. -pipibug(golf); 2005-3-12 (#2173854@0)

More Topics

  • 脑洞大开，突发奇想，用力来传播信息
  • 看大家讨论日语，俺也正在认真学习。其实语言问题应该是很快也很容易就解决的，可能比自动驾驶来的还快。TREK里面，全宇宙的人都在大脑里安装了UNIVERSAL TRANSLATOR，外星人之间相互交流无障碍。废话少说，看视频。。。加上个MIC和耳机，不同国家的人就可以无障碍交流。
  • 肉脸真有搞 IT 的？Linux 把俄国中国伊朗踢出去了好像肉脸 IT 没啥感觉似的
  • 请问web developer和software developer技术上有什么区别？
  • Elon Musk 带着川普总统奔向火星了。
    • 枫下论坛主坛 /  工作学习 /  IT技术讨论