linux security

John the Ripper:

$ sudo unshadow /etc/passwd /etc/shadow > mypasswd
$ cat mypasswd
$ john mypasswd

$ john --show mypasswd
0 password hashes cracked, 1 left

$ john --status
guesses: 0  time: 0:00:05:11 (3)  c/s: 456

http://www.openwall.com/john/doc/EXAMPLES.shtml

is useful.

Interrupting and running with $ bg  doesn't seem to work and left a john process and locked file.  Killing the process fixed this.  Running as,

$nohup john mypasswd &

then seemed to work ok but subsequent

$ john --status

returned a static,

guesses: 0  time: 0:00:00:02 0% (2)  c/s: 369

even though one of the machine cores was at 100$ with john using it all.  Don't do this then!  Run without nohup and &.