WonderNerd
January 24th, 2007, 07:49 PM
Is it possible to find the file or folder in which user passwords are kept on Macintosh? Perhaps, for obvious security reasons it is hiddin, would I be able to see it by running a different OS, such as Linux?
Lord_of_the_Dense
January 24th, 2007, 07:58 PM
You're a 1337 #4><0R and you can't figure this out?
WonderNerd
January 26th, 2007, 05:30 PM
Actually I have. It's called Brutal Gift, and it's kick-ass. Just seeing if any of you guys had any suggestions.
Jared Moya
February 11th, 2007, 12:57 PM
..............................
WonderNerd
March 14th, 2007, 08:29 PM
Alright - I know it seems pointless, but come on... I just want a little variety in what I use.
kaosfere
April 19th, 2007, 07:32 AM
OS X doesn't store passwords in flat files. It uses NetInfo, which is a network-centric information database, much like NIS and LDAP.
In short:
You can dump the equivalent of a standard unix password file by using the nidump utility. In versions of OS X < 10.3, this is sufficient for your brute force cracking, as it contains unshadowed passwords in standard crypt format.
However, in more recent versions of OS X, things are made a bit more complicated: passwords are shawdowed, stored in the filesystem based on a UID in the netinfo database, and hashed in two different ways.
For full details, have a look at this information (http://www.dribin.org/dave/blog/archives/2006/04/28/os_x_passwords_2/). And really, if you can't google that, don't call yourself 1337. ;)