Full Disclosure mailing list archives
Re: Root password change
From: Anders B Jansson <hdw () kallisti se>
Date: Fri, 31 Mar 2006 00:09:14 +0200
Michael Holstein wrote:
Isn't it easier to boot into single user mode and reset the password? It doesn't require you to load the live CD which is one less step.depends on if they setup 'console' as insecure or not in /etc/ttys.
Setuid script on /tmp? Given that /tmp isn't mounted with correct flags of course, And given that you're really the legitimate root on the machine. Otherwise it's social engineering and race conditions. But for a legitimate root, just boot -s on a cd, mount the / of the boot disk in rw and change the pw. And if you're not the legitimate root, do you really expect us to tell you how? White hats won't beacause it's wrong, black hats wont's because it's not funny, and gray hats won't because it's not intresting. -- // hdw _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Root password change Mockbee, Tom (Mar 30)
- Re: Root password change Michael Holstein (Mar 30)
- Re: Root password change Chris Adams (Mar 30)
- Re: Root password change spam (Mar 30)
- Re: Root password change Michael Holstein (Mar 30)
- Re: Root password change Anders B Jansson (Mar 30)
- Re: Root password change Kerry Thompson (Mar 30)
- Re: Root password change Gary E. Miller (Mar 30)
- Re: Root password change Michael Holstein (Mar 31)
- Re: Root password change Valdis . Kletnieks (Mar 31)
- Re: Root password change gboyce (Mar 31)
- Re: Root password change Valdis . Kletnieks (Mar 31)
- Re: Root password change gboyce (Mar 31)
- Re: Root password change Michael Holstein (Mar 30)