Shulou(Shulou.com)06/01 Report--

This article mainly shows you "how to install mimipenguin in Linux", the content is easy to understand, clear, hope to help you solve your doubts, the following let the editor lead you to study and learn "how to install mimipenguin in Linux" this article.

Mimipenguin is a free, open source, simple but powerful shell/python script that dumps login credentials (usernames and passwords) from current Linux desktop users and has been tested in different Linux distributions.

In addition, it supports things such as VSFTPd (active FTP client connection), Apache2 (active / old HTTP basic authentication session, but this requires Gcore), and openssh-server (active SSH link, using the sudo command). Importantly, it is gradually migrated to other languages to support all conceivable situations that can be used in the future.

How does mimipenguin work?

To understand how mimipenguin works, you need to know that all or most Linux distributions store a large amount of important information in memory, such as credentials, encryption keys, and personal data.

In particular, the user name and password are stored in memory by the process (a running program) and stored in clear text for a long time. Mimipenguin technically uses these plaintext credentials in memory-it dumps a process and extracts lines that may contain plaintext credentials.

Then, try to calculate the probability of occurrence of each word with the hash value of: / etc/shadow, memory, and regex search. Once anything is found, it will be printed on standard output.

Install mimipenguin in Linux

We will use git to clone the mimipenguin repository, so if you haven't installed it yet, install git on the system first.

$sudo apt install git # Debian/Ubuntu systems $sudo yum install git # RHEL/CentOS systems $sudo dnf install git # Fedora 22 +

Then clone the mimipenguin directory in your home directory (or anywhere else) like this:

$git clone https://github.com/huntergregal/mimipenguin.git

When the download is complete, enter and run mimipenguin as follows:

$cd mimipenguin/ $. / mimipenguin.sh

Note: if you encounter the following error, use the sudo command:

Root required-You are dumping memory... Even mimikatz requires administrator

Dump login password in Linux

From the output above, mimipenguin provides you with the user name and password for your desktop environment.

Alternatively, you can run the python script as follows:

$sudo. / mimipenguin.py

Note that sometimes gcore may block scripts (this is a known problem in gcore).

Future updates

Here are the features that will be added to mimipenguin:

Improve overall efficiency

Add more support and other credential locations

Including support for non-desktop environments

Add support for LDAP

The above is all the contents of the article "how to install mimipenguin in Linux". Thank you for reading! I believe we all have a certain understanding, hope to share the content to help you, if you want to learn more knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.