arquivos de senhas do linux

[Be.Cool]

ola galera eu estava fazendo uma busca pelo google e achei varios arquivos como esse:

Code Select Expand

root:eBKzSUogcBt4A:0:0:/root:/bin/bash
daemon:!:1:1:/tmp:/bin/false
bin:!:2:2:/tmp:/bin/false
sys:!:3:3:/tmp:/bin/false
sync:!:4:4:/tmp:/bin/false
games:!:5:5:/tmp:/bin/false
man:!:6:6:/tmp:/bin/false
lp:!:7:7:/tmp:/bin/false
nobody:LRck5IehT54Vc:5000:5000:/home/nobody:/bin/bash
httpd:Ful/4XDgIJ2/c:5001:5001:/home/httpd:/bin/ksh
exim:/jOVjtXS4H1/A:5002:5002:/home/exim:/bin/bash
brwashin:rdKh5DTonA2/M:5003:5003:/home/brwashin:/bin/bash
sahayes:SOmBQaAdzgPjs:5004:5004:/home/sahayes:/bin/bash
jareed:MwyiUS5izrFgM:5005:5005:/home/jareed:/bin/bash
nimarsha:wxJTNPDJPOnDk:5006:5006:/home/nimarsha:/bin/bash
anwillia:TFXkKRaEX/qlQ:5007:5007:/home/anwillia:/bin/csh
jascott:hXNbAA9XQn16Q:5008:5008:/home/jascott:/bin/bash
brbaker:vnzmIR4qpX6qc:5009:5009:/home/brbaker:/bin/bash
jegarcia:kydirRW3qfM0I:5010:5010:/home/jegarcia:/bin/bash
trellis:zSm2Ebxa6R5qg:5011:5011:/home/trellis:/bin/ksh
tahoward:3k6ckpJLoDRKY:5014:5014:/home/tahoward:/bin/bash
daflores:TCqFBF5noRd46:5016:5016:/home/daflores:/bin/ksh
marichar:sWw4dpswY/l9g:5017:5017:/home/marichar:/bin/bash
kajohnso:fNwjApFOw6RkQ:5020:5020:/home/kajohnso:/bin/ash
tyrogers:WEX4070.vVkeo:5021:5021:/home/tyrogers:/bin/bash
nascott:C2WGMS8mXevh.:5022:5022:/home/nascott:/bin/bash
lujackso:ER89iz3mfCUJQ:5023:5023:/home/lujackso:/bin/ksh
cowood:8QHmTpl2pgxoc:5024:5024:/home/cowood:/bin/bash
jerichar:fcp5vJhg6CgSI:5025:5025:/home/jerichar:/bin/bash
thlong:njzAtlpDyaAhs:5026:5026:/home/thlong:/bin/bash
kagreen:1mFDoxcrdM.hs:5027:5027:/home/kagreen:/bin/bash
mascott:OxL9iHHwGRs0g:5028:5028:/home/mascott:/bin/bash
amsander:eaErXn.uNgqIA:5031:5031:/home/amsander:/bin/csh
macox:7WGL3u5uQlpEA:5032:5032:/home/macox:/bin/ksh
hemurray:EM4aOaDm9IVFw:5035:5035:/home/hemurray:/bin/ksh
stbailey:UNjEXLIebIhio:5036:5036:/home/stbailey:/bin/bash
masander:5r7y.LfYjOUxE:5037:5037:/home/masander:/bin/bash
rythomps:GT46Mc/Tzk2Us:5039:5039:/home/rythomps:/bin/bash
kyhunt:ACgoSlfBgQhyA:5040:5040:/home/kyhunt:/bin/ksh
rolee:bDyCVfP6YRp7U:5043:5043:/home/rolee:/bin/bash
coblack:RSop.0.QQczRQ:5046:5046:/home/coblack:/bin/bash
brwallac:2MAgcR005BDoc:5047:5047:/home/brwallac:/bin/bash
jehayes:XVwUG.r//c1Vs:5050:5050:/home/jehayes:/bin/ksh
nihernan:5b1.5KWTtIDZk:5051:5051:/home/nihernan:/bin/csh
tirice:4y7dZtBo.jzj2:5053:5053:/home/tirice:/bin/bash
albell:AmK7X48UNSq9.:5054:5054:/home/albell:/bin/bash
dapowell:J28zrGOBVhw1M:5056:5056:/home/dapowell:/bin/ash
jethomps:bvylRMRfwEMJ6:5058:5058:/home/jethomps:/bin/csh
sebailey:tQUrKmFOQw2fw:5059:5059:/home/sebailey:/bin/ksh
abgraham:rSInpE6UCoYdA:5061:5061:/home/abgraham:/bin/bash
kasanche:5HXj5IGdsoI8s:5062:5062:/home/kasanche:/bin/ash
jeross:02MZ5YPobM3yA:5063:5063:/home/jeross:/bin/ksh
hahamilt:uMYkhYcbpPXe.:5064:5064:/home/hahamilt:/bin/bash
chbarnes:A612PmGGDICRQ:5065:5065:/home/chbarnes:/bin/bash
samarsha:Q5e6tgpY.O49c:5066:5066:/home/samarsha:/bin/csh
maross:sOODiaAvd.dBM:5067:5067:/home/maross:/bin/ash
brbryant:nZYZfPr/.0BFo:5069:5069:/home/brbryant:/bin/ksh
brthomps:F4XoYqs/Zak5A:5070:5070:/home/brthomps:/bin/bash
mahayes:clMwhDzv2.zg2:5071:5071:/home/mahayes:/bin/bash
lalewis:k9D0dVxPQSxKw:5072:5072:/home/lalewis:/bin/bash
megriffi:IbwLzag1vgbQ6:5073:5073:/home/megriffi:/bin/bash
meevans:FpySaoVaO3Hpw:5074:5074:/home/meevans:/bin/bash
marichar:XewS1hR/qM8G6:5076:5076:/home/marichar:/bin/zsh
almorris:usNKAgKKqcwKc:5077:5077:/home/almorris:/bin/bash
alcruz:/25isqBMtjnHg:5078:5078:/home/alcruz:/bin/ksh
erstewar:o9jwQw0kO7kUQ:5079:5079:/home/erstewar:/bin/sh
emlopez:cuva0EgNCWRMI:5080:5080:/home/emlopez:/bin/bash
gostaria de saber como faço para descriptografa-lo...
vlw.

[Wuefez]

Sim você encontrou um arquivo /etc/passwd recheado, so acho estranho você ter achado isso com o google por que esse arquivo nao fica numa pasta que o httpd poe na web, so se o admin for algum louco ou por acidente criou um vhost pra essa pasta.

Mas desculpe te decepcionar, mas é praticamente IMPOSSIVEL, quebrar isso.

[Be.Cool]

é eu descobrir isso!!!
pq as senhas sao criptografada assim que o cara entra no sistema e compara com a outra que ja existia!!!
e nao a uma comparacao com a  senha normal.

[HadeS]

Sim, é MD5. Criptografia só de ida, 128 bits, só dá pra quebrar com Brute Force.

HadeS