Tool to generate 'phash' style hashed passwords?

[snocc]

We have a need to create password hashes offline, is there a tool or script available to take a cleartext password and generate a phash?

For example, the audit team wants to be able to select a password and generate the hash, so we can later paste into a firewall when provisioning the 'audit' user, even though I would never know what their password actually is.

Something that could run on MS-Windows, batch or Perl script would be easiest.

[kfindlen]

You can use the "request password-hash" command on the CLI of the firewall to generate these.

admin@lab-firewall> request password-hash username user password test1234

$1$tjlcdrco$q/rIosAGEBWJQtFeRy9AX0

[jvalentine]

Here's an off-box method to do something similar:

http://www.insidepro.com/hashes.php?lang=eng

$1$tjlcdrco$q/rIosAGEBWJQtFeRy9AX0

The $ is a delimiter.  1=MD5(Unix) hash type.  rIosAGEBWJQtFeRy9AX0=the hash

If you go to that website, and type out a cleartext password & salt (I don't think the user name is needed on this site), and then click "Generate".  You can scroll down to MD5(Unix) and see the generated hash. 

They provide a little more "behind the scenes" detail here:  http://wiki.insidepro.com/index.php/MD5%28Unix%29

[kfelixdeft]

Does anybody have a new link to the offline phash generator? I'm looking for a means to give my customer access to a tool to generate the phash and then he|she can send me the phash to add to a user profile.  Right now they I'm generating random passwords with openssl or pyhton and sending the password back to the end-user. I rather not continue to do this since I know the password. 

[BPry]

@kfelixdeft,

I'm not sure that you can do this anymore like you used to be able to. You could build out a web portal that uses the firewall's API to gather the generated password hash however, then simply have them send you the output so that you can add it to the configuration.