±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35770
New Yesterday: 2 Visitors: 130

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

password recovery for ubuntu login

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

khalloud
Newbie
 

password recovery for ubuntu login

Post Posted: Mar 13, 19 10:20

hi guys


I wonder how can know the password of Ubuntu login to can examine the real evidence ??

is there tool like alcomsoft for windows password ??  
 
  

LeGioN
Member
 

Re: password recovery for ubuntu login

Post Posted: Mar 13, 19 10:38

Someone might be able to correct me here:

But would it not be possible to mount the system in a live linux enviroment, and there copy out the /etc/shadow and /etc/passwd.
Combining them into one file for John the ripper to read using unshadow. unshadow passwd.txt shadow.txt > passwords.txt
And from there use John to crack it? Smile

/LeGioN  
 
  

marky.mark
Member
 

Re: password recovery for ubuntu login

Post Posted: Mar 14, 19 18:02

Hi khalloud,

We would need more information to help you. Are you doing live forensic directly on the PC (on another account)? Did you do an acquisition of the hard drive (e01 etc)? Is the hard drive encrypted, or you have some kind of access? Which version of Ubuntu is running on the PC? Are you sure the information you are trying to retrieve directly on the user partition/folder? Is the user partition/folder encrypted?

Or is it more like a theoretical question?

You need to give us a more global view of the situation if you want useful answers!

Have a nice day.

M.  
 
  

watcher
Senior Member
 

Re: password recovery for ubuntu login

Post Posted: Mar 15, 19 02:54

If you have access to the drive contents already, why do you want the password?  
 
  

Hwallbanger
Member
 

Re: password recovery for ubuntu login

Post Posted: Mar 19, 19 00:12

Dear khalloud,

I understand that you are a Newbie, but have you had some training and if you have, then you should know that you can use Forensic tools to accomplish your investigation after having gained access via Read Only connection.

Marky.Mark and Watcher make some very appropriate comments,
We would need more information to help you. "
and
" ... why do you want the password ? "
You also have not provide the Distro's version that you are looking at. This can make a difference.

Why do you need to login for your investigation ? This has not been really explained. I say this because a method that you could use is to take the drive image and (in general) then place it into a Virtual Machine and accomplish an investigation as if you were sitting in-front of the PC/Server and possibly also accomplish Memory Forensic, too. Are you doing Digital Forensics - or - Network Forensic's/ Incident Response ? It all depends upon what are you trying to accomplish.

I hope that this has help to clarify why there is a need for more information. Smile

HWallbanger
Systems Integrator since late 1980's  
 

Page 1 of 1