SecureMac, Inc.

Malevolence

June 2, 2001

What is Malevolence?

Malevolence is a simple application created by Marukka which extracts login/password information from the system in a unshadowed format. It has been discovered there a numerous ways to obtain the passwd information from netinfo including simply typing the command command “nidump passwd .”

Once you have the encrypted password file it may be decrypted with a method refered to as cracking or using a bruteforce attack.

Directions

Malevolence is very easy to use, in either Terminal.app or though a telnet session just run Malevolence and it will create a file called …

Malevolence

What is Malevolence?

Malevolence is a simple application created by Marukka which extracts login/password information from the system in a unshadowed format. It has been discovered there a numerous ways to obtain the passwd information from netinfo including simply typing the command command “nidump passwd .”

Once you have the encrypted password file it may be decrypted with a method refered to as cracking or using a bruteforce attack.

Directions

Malevolence is very easy to use, in either Terminal.app or though a telnet session just run Malevolence and it will create a file called “index.html” in the same directory as Malevolence. Then just open up the web browser of your choosing and view the index.html file that Malevolence created.

Download

Malevolence (requires Mac OS X user account)

 

Get the latest security news and deals