nerdexam
GIAC

GPEN · Question #441

What command will correctly reformat the Unix passwordcopy and shadowcopy Tiles for input to John The Ripper?

The correct answer is C. /Unshadow shadowcopy passwdcopy >john file. The marked answer C appears to be incorrect. The standard unshadow syntax is: unshadow <passwd-file> <shadow-file> > <output-file> - the passwd file (passwdcopy) must come FIRST, followed by the shadow file (shadowcopy). Answer C reverses this order (shadowcopy before passwdcopy)

Exploitation & Post-Exploitation Techniques

Question

What command will correctly reformat the Unix passwordcopy and shadowcopy Tiles for input to John The Ripper?

Options

  • A/Un shadow passwd copy shadowcopy > johnfile
  • B/Unshadow passwdcopy shadowcopy > johnfile
  • C/Unshadow shadowcopy passwdcopy >john file
  • D/Unshadow passwdcopy shadowcopy > johnfile

How the community answered

(61 responses)
  • A
    13% (8)
  • B
    3% (2)
  • C
    79% (48)
  • D
    5% (3)

Explanation

The marked answer C appears to be incorrect. The standard unshadow syntax is: unshadow <passwd-file> <shadow-file> > <output-file> - the passwd file (passwdcopy) must come FIRST, followed by the shadow file (shadowcopy). Answer C reverses this order (shadowcopy before passwdcopy) and introduces a space in 'john file', both of which are errors. Answers B and D both show the correct argument order (/Unshadow passwdcopy shadowcopy > johnfile). The unshadow utility merges the two files so John the Ripper can match hashed passwords in /etc/shadow with usernames and metadata in /etc/passwd for dictionary or brute-force cracking.

Topics

#John the Ripper#unshadow#Unix passwords#password cracking

Community Discussion

No community discussion yet for this question.

Full GPEN Practice