Nous récupérons un vault sous cette forme ``` $ANSIBLE_VAULT;1.1;AES256 63303831303534303266356462373731393561313363313038376166336536666232626461653630 3437333035366235613437373733316635313530326639330a643034623530623439616136363563 34646237336164356438383034623462323531316333623135383134656263663266653938333334 3238343230333633350a646664396565633037333431626163306531336336326665316430613566 3764 ``` (enregistré dans vault.txt) Utiliser ansible2john ``` ansible2john vault.txt > crack_vault.txt ``` cracker le password ``` john crack_vault.txt -w:/usr/share/Wordlist/rockyou.txt ``` le mot de passe permet ensuite d'ouvrir le vault ``` ansible-vault ```