Linux Local Password Attacks

Linux Password management

• The encryption of the password in /etc/shadow file is formatted as follows:

  $ <id>	$ <salt>	$ <hashed>
  $ y	$ j9T	$ 3QSBB6CbHEu...SNIP...f8Ms

• The type (id) is the cryptographic hash method used to encrypt the password. Many different cryptographic hash methods were used in the past and are still used by some systems today.

  ID	Cryptographic Hash Algorithm
  $1$	MD5
  $2a$	Blowfish
  $5$	SHA-256
  $6$	SHA-512
  $sha1$	SHA1crypt
  $y$	Yescrypt
  $gy$	Gost-yescrypt
  $7$	Scrypt