A very strange thing happened:

There is a user that has a HASH:

[root@notebook /home/username/Desktop/b/a] cat passwd-machine 
foo:x:2229:3001:,,,System,fooo,-,userid for bar;foobar:/home/foo:/bin/bash
[root@notebook /home/username/Desktop/b/a]

[root@notebook /home/username/Desktop/b/a] cat shadow-machine 
[root@notebook /home/username/Desktop/b/a]

[root@notebook /home/username/Desktop/b/a] john -show *

1 password hash cracked, 0 left
[root@notebook /home/username/Desktop/b/a] 

[root@notebook /home/username/Desktop/b/a] cat ~/.john/john.pot 
[root@notebook /home/username/Desktop/b/a]

[root@notebook /home/username/Desktop/b/a] cat -vte ~/.john/john.pot 
[root@notebook /home/username/Desktop/b/a] 

BUT!: It looks like... it has no password assigned to the hash!

If I append the "passwd-machine " file content in my Desktops /etc/passwd and append the "shadow-machine" file in my /etc/shadow.. then I can "su - foo" without any password from a normal user.

How could this happen? The given user "foo" has a hash.

But it looks like... it has no password.. how could there be a hash if I can log into that user without password? Can someone explain this please? It's hard to google for this :\

1 Answer 1


That is actually the md5-based hash for the empty password:

$ mkpasswd -m md5 -S 9TGbA/j3 

You must log in to answer this question.