Table of Contents

Hashes used in Linux (with no salt added)

# md5 hash w/no salt
echo -n "password" | md5sum | cut -d"-" -f1 > crackme_md5_nosalt.txt
john --format=raw-md5 crackme_md5_nosalt.txt

# sha256 hash w/no salt
echo -n "password" | sha256sum | cut -d"-" -f1 > crackme_sha256_nosalt.txt
john --format=raw-sha256 crackme_sha256_nosalt.txt

# sha512 hash w/no salt
echo -n "password" | sha512sum | cut -d"-" -f1 > crackme_sha512_nosalt.txt
john --format=raw-sha512 crackme_sha512_nosalt.txt

Hashes used in Windows (with no salt added)

Open a text-editor

vim nt_hash_generator.py

Copy & paste the code below

#!/usr/bin/env python3
import hashlib

def generate_nt_hash():
    pw_raw = input("Password: ")
    pw_encoded = pw_raw.encode("utf-16le")
    pw_hashed = hashlib.new("md4", pw_encoded)
    pw = pw_hashed.hexdigest()
    print(pw)

generate_nt_hash()

Generate an NT hash

python3 nt_hash_generator.py

Crack the hash

john --format=nt crackme_nt_nosalt.txt

Hashes used in Linux (with salt added automatically)

MD5 hash with salt

Open this file

vim /etc/pam.d/common-password

Edit it

# change this
password	[success=1 default=ignore]	pam_unix.so obscure sha256

# to this
password	[success=1 default=ignore]	pam_unix.so obscure md5

Create an account

useradd victim1
passwd victim1

Crack it

tail -n1 /etc/passwd > passwd_copy
tail -n1 /etc/shadow > shadow_copy
unshadow ./passwd_copy ./shadow_copy > ./crackme_md5_salt.txt
john ./crackme_md5_salt.txt

SHA256 hash with salt

Open this file

vim /etc/pam.d/common-password

Edit it

# change this
password	[success=1 default=ignore]	pam_unix.so obscure md5

# to this
password	[success=1 default=ignore]	pam_unix.so obscure sha256

Create an account

useradd victim2
passwd victim2

Crack it

tail -n1 /etc/passwd > passwd_copy
tail -n1 /etc/shadow > shadow_copy
unshadow ./passwd_copy ./shadow_copy > ./crackme_sha256_salt.txt
john ./crackme_sha256_salt.txt

SHA512 hash with salt

Open this file

vim /etc/pam.d/common-password

Edit it

# change this
password	[success=1 default=ignore]	pam_unix.so obscure sha256

# to this
password	[success=1 default=ignore]	pam_unix.so obscure sha512

Create an account

useradd victim3
passwd victim3

Crack it

tail -n1 /etc/passwd > passwd_copy
tail -n1 /etc/shadow > shadow_copy
unshadow ./passwd_copy ./shadow_copy > ./crackme_sha512_salt.txt
john ./crackme_sha512_salt.txt

Show hacked accounts and their passwords

john --show *.txt

References