![]() ![]() |
Home |
How it works |
Projects archive |
Contact Us Air Compressor Bot |
|
| The Career Path of Freelance Programming Jobs |
Insecure Password Checker |
![]() |
Bidding Time: |
26/04/2008 23:51 - 10/05/2008 23:51 |
Budget: |
$75-200 |
Status: |
Pending |
|
|
|
Job Type: |
|
Description: |
for part 1 only, and towards the high end if you are going to do both parts. Part 1: Need a script that I can run on my server to test for insecure passwords. This script should run locally on the server only, I will not be using to test passwords remotely. I want to make sure I don't have any users with passwords like: letmein test password1 etc. I want this to test usernames in: /etc/passwd for easy to guess passwords (maybe like 100-1000 of the most common passwords), or variations of the username (IE, username backwards, a replaced with [at sign], username plus a number) I also want the ability to have the script read from a word list. Part 2 I want the script to also test email passwords, this is a cpanel server and the email passwords are in: /etc/vmail]# cat passwd.jeffsballoons.com test:x:32006:32008::/home/jeff/mail/jeffsballoons.com/test:/bin/bash ronlost2:x:32006:32008::/home/jeff/mail/jeffsballoons.com/ronlost2:/bin/bash for example it would need to assemble test the fully qualified username: test[at sign]jeffsballoons.com or test+jeffsballoons.com and ronlost2[at sign]jeffsballoons.com or ronlost2+jeffsballoons.com It would need to cycle through multiple domains in the /etc/vmail directory. And it would also need to test additional FTP account logins: which are in: /etc/proftpd/username These logins need to be fully qualified also, so it would have to append the domain, which you might have to get from /etc/userdomains The format of that file is: trellsion:$1$KBDU3J6h$q0KH02r0rEBXG43SJT3Vs.:32006:32008:jeff:/home/jeff/public_html/trellsion:/bin/ftpsh so the fully qualified username for that one would be trellsion[at sign]jeffsballoons.com or trellsion+jeffsballoons.com Related Projects: This project is the proprietary information of .
Click here to remove this project from OUR database.
|
Operating System: |
N/A |
Database System: |
N/A |
| <<< back |
|
| Home | Projects archive | RSS | Resources | Links | Contact Us | © 2004-2007 ProjectsList.biz /0.389 |