/etc/shadow

With access on /etc/passwd and /etc/shadow, you can try to crack passwords:

• Copy both files where you want on your cracking machine

• Make it crackable:

unshadow passwd shadow > pwd.txt

• Try to crack it with john:

john pwd.txt