rootninja

Want a password hash that has a special word or set of characters in it just because? Why not?

# while [ ! $x ]; do openssl passwd -1 pass:sysmanager | grep -i abc && x=1; done

Or just keep going through, spitting out matches as you find them.

# while true; do openssl passwd -1 pass:supersecret | grep -i abc; done

If you have access to a number of networked machines with shared ssh authorized_keys, you could give each one a nice cpu burn in test and try to find something complicated.

# for x in host1 host2 host3; do ssh $x \
"while true; do openssl passwd -1 pass:supersecret | grep -i r[o0][o0][+t] \
>> /tmp/pass.out \&; done"; done

$1$PYnozfw7$jxeR00TJEbci.m2Q4ZW2v.
$1$xc7UUVcJ$Wrootr4NfGqiLTk3cLOVL1
$1$uCMA0TSz$guqqmdB3X3BRN6CrOOTHh0

Just remember…

Every extra character you grep for exponentially increases the average time it will take before you get a hit.

I had some time to kill and I was bored…