Cum verificam parole de mail usor de spart din ispconfig3
Cum verificam parole de mail usor de spart din ispconfig3 ?
mysql -u root -p dbispconfig
Rulam odată autentificați (merge cu parola de root de la mysql):
mysql> SELECT email,password FROM dbispconfig.mail_user INTO OUTFILE ‘/tmp/sql.txt’ FIELDS TERMINATED BY ‘:’ ESCAPED BY ‘\\’ ENCLOSED BY ” LINES TERMINATED BY ‘\r\n’;
mysql> quit
acum este creat un fișier /tmp/sql.txt care conține userii de mail de pe server și parolele criptate
Instalam programul de analiza:
apt-get -y install john
și acum vom încerca să “spargem parolele de mail:
john -single /tmp/sql.txt
va afișa parolele sparte. dacă vrem mai târziu sa revedem, rulam:
john –show /tmp/sql.txt
nu uitați la sfârșit sa ștergeți:
rm -rf /tmp/sql.txt
Dacă vrem automatizare, facem asa:
vim /home/mailpassscript
și introducem:
SELECT email,password FROM dbispconfig.mail_user INTO OUTFILE '/tmp/sql.txt' FIELDS TERMINATED BY ':' ESCAPED BY '\\' ENCLOSED BY '' LINES TERMINATED BY '\r\n';
acum cream scriptul care va face totul zilnic:
vim /home/mailpasstest
rm -rf /tmp/sql.txt cat /dev/null > /home/backupscripts/mailpasshack mysql -uroot -pPAROLADEROOTMYSQL dbispconfig < /home/mailpassscript echo "`date +%F` = `cat /tmp/sql.txt |wc -l` conturi de mail" >> /home/mailpasslog cat /home/mailpasslog > /home/mailpasshack john -single /tmp/sql.txt john --show /tmp/sql.txt >> /home/mailpasshack mail -s "verificare parole mail, `date +%F`" adresademail@domeniu.ro < /home/mailpasshack -c adresaalternativademail@domeniu.ro
în exemplu se trimite mailul la 2 adrese de mail.. dacă se dorește doar la una, se șterge ce este după -c
și se introduce în cron sa ruleze zilnic la ora 5:30
crontab -e
30 5 * * * /home/mailpasstest
Ultimele știri ispconfig:
- Bootchart (Русский)
- RouterBOARD hardware • Re: RB5009 - eth 1 (2.5G) keep appears on log with link down - link up several times
- Windows 11 on Arm users will soon have a new web browser, and you can try it today
- Next Week on Xbox: New Games for April 22 to 26
- My partner became a Minecraft addict because of XREAL's AR glasses — And I previewed the next generation at GDC
- Rxvt-unicode
- The best Steam Deck competitor drops to $399 — cheaper and more powerful than Valve's entry-level gaming handheld
- Office LTSC 2024, which gets you Office without a subscription, is here in preview, but it's probably not for you
- What does Microsoft's big NetEase-Blizzard partnership mean for Xbox? An analysis.
- I hope Call of Duty's anti-cheat team is paying attention to the latest crack down on unapproved peripherals in Overwatch 2
Leave a Reply
Want to join the discussion?Feel free to contribute!