john-users - Mac OS X 10.5.3 Leopard password hashes

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / NEWS community lists Wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [thread-next>] [month] [year] [list]

Date: Mon, 23 Jun 2008 23:57:56 -0400
From: "55 89 e5" <5589e5@...il.com>
To: john-users@...ts.openwall.com
Subject: Mac OS X 10.5.3 Leopard password hashes

I recently set up a user account on my Mac OS X 10.5.3 Leopard machine
with a password of "apple" and the corresponding has in a file in
/var/db/shadow/hash is:

00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
0000000001295B67659E95F32931CEDB3BA50289E2826AF3D5A1422F000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000

It appears to me that the salted SHA-1 hash is:

1295B67659E95F32931CEDB3BA50289E2826AF3D5A1422F

I create a file with the following contents:

username:1295B67659E95F32931CEDB3BA50289E2826AF3D5A1422F:::::::

and when I try to crack it with John using the --format=ssha option,
John keeps saying that "No password hashes loaded."

Could somebody clue me in on what I'm doing incorrect?

Thank you.

-- 
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.