‫In Linux systems, the ETSI Shadow files stores, actual passwords in encrypted format, more like the
‫hash of the password for users account with additional properties related to the user password.
‫Basically, it stores secure user account information.
‫All fields are separated by Colin Symbol.
‫And it contains one entry per line for each user listed in the FTC password file, generally shadow
‫file entry looks seen in the slide.
‫So let's see the fields of a typical Linux hash values most probably gathered from the shadow file.
‫Just like in the windows, local hashes fields are separated by colons in the Linux hashes.
‫The first field is username, your login name, the second field is your encrypted password, usually
‫the password format is set to deliver ID $ altie $ hash ID is the algorithm used on going to Linux as
‫followed.
‫Dollar one dollar is empty five.
‫Dollar to a dollar is blobfish.
‫Dollar two, why dollar is blowfish.
‫Dollar five dollar is S.A.G. 256, dollar six dollar is as 512.
‫Now, the third field is the date that the password was last modified.
‫The fourth field is the minimum number of days required between password changes, that is the number
‫of days left before the user is allowed to change his or her password.
‫The fifth field is the maximum number of days a password is valid, after that, the user is forced
‫to change his or her password.
‫The sixth field is the number of days before the password is to expire, that user is warned that his
‫or her password must be changed.
‫Now, there are two more fields in the line which are blank in this example.
‫The seventh field is called inactive, which is the number of days after the password expires that the
‫account is disabled.
‫And the last field is called expire, which indicates the days since one January 1970 that the count
‫is disabled.
‫That is an absolute date specifying when the log in may no longer be used.