Passwd Shadow & Opasswd

ℹ️ Informations¶

• 🌐 Website: HackTheBox
• 📚 Module: Password Attacks
• 🔗 Link: Passwd Shadow & Opasswd

❓Question¶

Examine the target using the credentials from the user Will and find out the password of the "root" user. Then, submit the password as the answer.

📋 Walkthrough¶

Reuse the password from last section. will:TUqr7QfLTLhruhVbCP. In his bash history, we can discovery a folder named .backup containing passwd and shadow. We can save them, unshadow them and try to crack them using jhon and mut_password.txt

john -w=mut_password.list unshadow --format="sha512crypt"