WordPress, Drupal, and Webmin Password Cracking
Web applications are a cornerstone of modern business and system management. However, their implementation can vary widely, and as employees move companies and change roles, it is possible that some important credentials can be lost and need to be recovered. Thankfully, the related password hashes are often stored in databases or files on the system and can be retrieved. Once you understand the format of that particular application’s hashes, you can move on to cracking them. In this chapter, we will highlight three common web applications for system management and content management; however, for research, these principles can be applied to other types of applications as well.
In this chapter, we will cover the following main topics:
- Collecting and formatting WordPress hashes
- Cracking WordPress hashes
- Collecting and formatting Drupal hashes
- Cracking Drupal hashes
- Collecting and formatting Webmin hashes...