.htpasswd crack
(HTTPのBasic認証の為のもの)
code:bash
$ cat .htpasswd
pypi:$apr1$RV5c5YVs$U9.OTqF5n8K4mxWpSSR/p/
この右側のやつはハッシュ(md5)なのでクラック必要がある:
code:bash
└─$ john --wordlist=/usr/share/wordlists/rockyou.txt htpasswd
Warning: detected hash type "md5crypt", but the string is also recognized as "md5crypt-long"
Use the "--format=md5crypt-long" option to force loading these as that type instead
Using default input encoding: UTF-8
Will run 4 OpenMP threads
Press 'q' or Ctrl-C to abort, almost any other key for status
soufianeelhaoui (?)
1g 0:00:00:27 DONE (2022-06-15 21:53) 0.03608g/s 128988p/s 128988c/s 128988C/s soul17soul17..souderton16
Use the "--show" option to display all of the cracked passwords reliably
Session completed.