Cum verificam parole de mail usor de spart din ispconfig3
Cum verificam parole de mail usor de spart din ispconfig3 ?
mysql -u root -p dbispconfig
Rulam odată autentificați (merge cu parola de root de la mysql):
mysql> SELECT email,password FROM dbispconfig.mail_user INTO OUTFILE ‘/tmp/sql.txt’ FIELDS TERMINATED BY ‘:’ ESCAPED BY ‘\\’ ENCLOSED BY ” LINES TERMINATED BY ‘\r\n’;
mysql> quit
acum este creat un fișier /tmp/sql.txt care conține userii de mail de pe server și parolele criptate
Instalam programul de analiza:
apt-get -y install john
și acum vom încerca să “spargem parolele de mail:
john -single /tmp/sql.txt
va afișa parolele sparte. dacă vrem mai târziu sa revedem, rulam:
john –show /tmp/sql.txt
nu uitați la sfârșit sa ștergeți:
rm -rf /tmp/sql.txt
Dacă vrem automatizare, facem asa:
vim /home/mailpassscript
și introducem:
SELECT email,password FROM dbispconfig.mail_user INTO OUTFILE '/tmp/sql.txt' FIELDS TERMINATED BY ':' ESCAPED BY '\\' ENCLOSED BY '' LINES TERMINATED BY '\r\n';
acum cream scriptul care va face totul zilnic:
vim /home/mailpasstest
rm -rf /tmp/sql.txt cat /dev/null > /home/backupscripts/mailpasshack mysql -uroot -pPAROLADEROOTMYSQL dbispconfig < /home/mailpassscript echo "`date +%F` = `cat /tmp/sql.txt |wc -l` conturi de mail" >> /home/mailpasslog cat /home/mailpasslog > /home/mailpasshack john -single /tmp/sql.txt john --show /tmp/sql.txt >> /home/mailpasshack mail -s "verificare parole mail, `date +%F`" adresademail@domeniu.ro < /home/mailpasshack -c adresaalternativademail@domeniu.ro
în exemplu se trimite mailul la 2 adrese de mail.. dacă se dorește doar la una, se șterge ce este după -c
și se introduce în cron sa ruleze zilnic la ora 5:30
crontab -e
30 5 * * * /home/mailpasstest
Ultimele știri ispconfig:
- General • Re: Disable WIREGUARD clients from local LAN
- KDE
- Razer's latest Kishi controller wants you to take mobile gaming seriously by being the best in the world — and it just might work
- Free Play Days – Dungeons 3, Eiyuden Chronicle: Rising and I Am Fish
- I missed out on this Microsoft 365 deal but you don't have to, as long as you act quickly
- How to install Fallout 4 mods on PC
- [PATCH 4 of 4] Stream: added MPTCP support (no replies)
- Best Fallout 4 mods on PC
- The Windows 10 Settings app is the latest attack vector Microsoft will use to push you to sign up for a cloud account
- Microsoft eludes EU antitrust merger probe over its multi-billion dollar investment in OpenAI amid claims it's turned into 'a glorified IT department for the hot startup'
Leave a Reply
Want to join the discussion?Feel free to contribute!