QuestionQ41

VerifiedNetwork Penetration Testing Methodology – Internal

George, a freelance Security Auditor and Penetration Tester, was conducting a pen-testing assignment for Xsecurity. George is an ESCA-certified professional and was following the LPT methodology to perform a comprehensive security assessment of the company. After the initial reconnaissance, scanning, and enumeration phases, he successfully recovered a user’s password and could log on to a Linux machine on the network. He could also access the /etc/passwd file; however, the passwords were stored as a single x character.

What will George do to recover the actual encrypted passwords?

Explanation

A lowercase x in the password field of /etc/passwd indicates that the encrypted password is stored in /etc/shadow. Because /etc/shadow is readable only by the superuser, root-level privilege is needed to access the stored password hashes. passwd(5) — Linux manual page

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!