Mar 29, 2011

rootkit.com user database processing


## Build the current version of JTR
$wget http://www.openwall.com/john/g/john-1.7.6-jumbo-12.tar.gz
$tar -zxvf john-1.7.6-jumbo-12.tar.gz
$cd john-1.7.6-jumbo-12/src
$make clean linux-x86-64
$cd ../run/
$./john --test

## restore mysql database
$mysql -p
>create database test;
>use test;
>source /tmp/xxx_backup

## dump user/password into txt file
>SELECT email,password INTO OUTFILE '/tmp/xxx.txt' FIELDS TERMINATED BY ':' LINES TERMINATED BY '\n' FROM usertable where length(password)=32;
## feed it into JTR
$./john --wordlist=passwords.txt --format=raw-MD5 /tmp/xxx.txt
## enjoy
$./john --show /tmp/xxx.txt --format=raw-MD5

No comments: