Linux Hacking

[LiezerZero]

@RetroShinigami More like. "How to login as single user.. default root"

[LiezerZero]

HAHAHA thats called Single User Mode children.

[sonofMegaAlexandros]

open cat /etc/shadow then joe /etc/shadow

mount the other Partition whicht you have the passwort in a new window.

then change the unknown password with a known password in joe.

so easy ! lol

do some one know how I can krack a windows password ?

[LiezerZero]

@sonofMegaAlexandros Not that easy when all the passwords are salt encrypted. you can just single user it and "# passwd" it then reboot and login as root or change the run level to 3 for multi user mode or 4 for x11

[TheMeanEYE]

@sonofMegaAlexandros Ironically enough there is a specialized Linux tool used for resetting Winblows passwords. All you need to do is boot, select installation and set a new password.

[MrIntosh]

*cough (sudo passwd)

[hrcc9]

FAIL. this is baby shit. coldboot with a ubuntu live cd.

[LiezerZero]

@hrcc9 Not needed.. so your comment is a fail a pone itself.

[morgulbrut]

So thats why on my laptop a BIOS password is set ;)

[suyashr2]

@morgulbrut

To avoid that you need a GRUB password a BOIS passwd won't help

[TheMeanEYE]

@suyashr2 He might have thought about setting computer password in BIOS. Toshiba laptops have ability to set HDD password so even if you move HDD to another computer you can't access it which is great. :)

[LiezerZero]

@TheMeanEYE Not ture. All it takes is a change of the master boot record and BAM no password

[TheMeanEYE]

@LiezerZero Like I said, password protection is on HDD itself, moving HDD out or doing whatever won't help. HDD won't turn on unless proper password is provided. Only thing you can do with Toshiba protected HDDs is to call their tech support and prove you are the owner of laptop. Besides, you can access any computer you want if you have physical access to it. If someone really cared about his data on computer he should use cryptfs. This is not hacking, this is recovery tutorial 101.

[artifactingreality]

Not really hacking, but a cool trick anyway. For those that lose their root password I suppose.

[evilunixuser1]

HACKING?!??? LOL! Any moron with even a month of Linux/Unix exposure can do this. Besides, I was cutting my teeth on Unix long before Linux got started - everything from shell prompt.

[autonomous2010]

Sorry this doesn't work on my gentoo laptop.

I don't even see the grub menu. It boots directly into the OS. :-)

[malik932008]

@autonomous2010 hold shift when booting

[autonomous2010]

@malik932008 That only works for grub 2. I have grub legacy and even ESC doesn't work.

[malik932008]

@autonomous2010 i remember i used it with grub legacy

[autonomous2010]

@malik932008 I will try it again once I get my gentoo box set up again.

[NomNomPlz]

Do people even understand that hacking is also changing code...

[Terhal42]

(-_-)> Everybody know that ...

[jacksawild]

try that on a secure box

[Ormaaj]

Changing the kernel parameters in Grub isn't hacking. Fail.

[autonomous2010]

I have the grub bootloader set up so it doesn't show up and the first choice is always the one immediately booted.

This of course CAN be changed but changing it would require being able to log in as root.

Besides that, this isn't hacking. Its in the manual.

[drcanavis]

pretty well, hahaha...

[voiser]

Next step: Denial Of Service by using a hammer on the hard disk.

[drcanavis]

@voiser  good one, hahaha

[niggrfack]

LOL, who is using linux???

this os is for loosers, who cant afford a windows

[NiGhtMarEs0nWax]

@niggrfack i bought windows, it was shit.

[DemonCullen]

LOL at you.

I have 3 copies of Windows 7, 4 copies of XP, and yet Linux is better than all of them.

[KuruminKid]

noob

[Gruja1000]

lol u call thise hacking? lololol..give me ur id, i will rename you, when u wake up u will be mr.Jons

[Arkblu]

This doesn't work with every distribution. Many distros have fixed issues like this and for example, sudo rm -rf /

[autonomous2010]

@Arkblu Even with root access "sudo rm -R /" just says access denied.

[Linuxhax]

This is lame. You should post a rootkit tutorial lol.

You wouldnt be able to do this unless you had physical or kvm/IPMI access to the machine.

[ikemkrueger]

Grub lässt sich mit einem Passwort absichern. Damit ist das hier nur möglich, wenn man das Passwort weiss.

[spezialgast]

blödsinn, das kannst du mit jeder live cd auch machen, musste dich nur entsprechend ins debian chrooten. bei ubuntu gehts sogar noch einfacher, da lässt sich ne "rettungsshell" starten in der man dann gleich aufm root prompt landet. bei mac os ist es ähnlich einfach.

[ikemkrueger]

Bei meiner Aussage hab ich vorausgesetzt, das nur das booten von Festplatte erlaubt ist.

[htfkid2000]

and i thought linux was secure O.o! oh wait you have to be right in front of it for it to work!

[LirionD]

A PC you can sit in front of is NEVER secure. There are boot CDs et cetera...

you can secure GRUB against this, but you never can secure a machine you can access.

You could also connect to the hard disk the root partition is on and run a chroot, then doing the passwd thing...

and so on.

Nice trick this, but this kind of "insecurity" is nothing brand new.

[htfkid2000]

umm if you say that that applies to all computers starting from ABACUS to IBM ROADRUNNER super computer!

[nantocsem]

no matter what does hacker and hacking means, linux is secure, and its only enemy is the linux-installer disc (and as we can now see, the unpassworded grub). But how can you find anything in a directory, which is chmodded for only root to see/modify, and where's a primeencrypted grub password primeencrypted root password and a primeencrypted ext3/4 partition is working?

[ZuljinTheShadow]

People these days use the word Hacker incorrectly. originally hackers were a kind of programmer usually working under some kind of unix-like system. they were the ones who brought up and maintained the internet when it was still young. Then a group of "bad guys" who should be called: "crackers", and "black hats" were breaking into servers and getting all the attention. They called themselves hackers and as a result, the media and every other idiot on this planet incorrectly uses the term hacker.

[boriddlin]

Hacking is writing programs without a plan.

I learned this during my CS Degree. That is the only definition that computer literate people use.

If you want to talk about illegally accessing a mainframe - then state that - it's not called hacking though. I've already explained to you what that is...

[Ezcut]

lol wtf? ..

[jawsykilla]

This is pathetic

[TheComputerCriminal]

NOT FUCKING HACKING!!! this is 101 computer basics.. comes with every linux manual -__-

[pampos123]

i agree

[24oscar24]

but but what if he doesnt have installed bash?

thats why you gotta use the -s line at the end of the kernel to boot as a single user(root)

[Racecar564]

sh

if they dont have that then idk how the system even works

[24oscar24]

i dont understand your point.

interestingfact: sh in debian is only a hard link to bash.

[Racecar564]

usually a linux system always includes bash so i dont see how any linux computer that works dosent have bash

[24oscar24]

its bad practice like putting in a POSIX script bash as the interpeter instead of sh

normally it woldn matter anyway but makes it alot more portable.

anyways i use bash,zsh and ksh.

but all my scripts are in posix for portable ends.

[dangerriff]

lol

[voidfalse]

Hacking? Maybe for ubuntu kids it's hacking

[Sjums07]

The definition of hacking is to get access to something you aren't allowed to :D so it is a kind of hack :p but it's local, so not funny :p

[Programmer780]

No, that is cracking. Real hacking is defined by ESR at catb(dot)org

[Programmer780]

Besides its not even real cracking, it is a local, not remote system that you have permission to access.

[SeniorGeneralOmega]

There are different definitions for hacking. It can be classified as modification to software that is allowed or not, modifying one's system, or gaining unauthorized access to another system.

[pinguspengu1n]

Teach me your ways love guru

[sevenedus]

Guru! Nice job

[liquidthex]

If you have direct access to the console you can do anything.. windows or linux alike.

There ARE methods however if you do want a secured console!

You can encrypt your entire disk, for instance.. Can't even get to grub without the proper password. Could rip the entire disk out slap it in another computer and it wouldn't do you any good.

[E18GERMERING]

WOW that was hacking. . . -.-

[Kojow7]

This is built into GRUB by design, it has nothing to do with hacking. A more realistic title might be "Changing a Forgotten Root Password on Debian."

[saraph83]

wow nothing new! lol

all you did was modify GRUB to enter into single user mode WOOOOOOOOO haaaaa lol

now what would you do with a grub loader that had an hashed password access??

[AdamBailey9]

Use liveCD to delete/overwrite the hash

[saraph83]

excellent point but what if you have access to a BIOS password protected system with out the option to clear the CMOS? And you are unable to remove the drive and attach it to another system because it would take you hours and hours to crack the algorithm? LOL

[evolutionspot]

cant do that with an encrypted hard drive

[outslider1]

oh, man... With physical acces there's no problem, to got root acces. You can simply put LiveCD and all kind of computer will be your. Am I right?

[Rcman425]

oooohh noobie man!

[Neelo5000]

Basic Linux tutorials teach how to do this. After all, passwords can't protect you if someone is in the room with your machine.

[Uberware]

Usually you dont have physical access to the box. :)

[hordepwnage]

what direction do i go in to start teaching myself to hack?

[awells527]

Physical Access = Root Access (this isn't hacking)

[TheCrazyRipper]

quote

[miksuh]

I don't really understand how this is supposed to be hacking. He did just change the GRUB bootloader settings, that's not hacking. Ofcourse you can do that if you can physically access the computer, EXCEPT that usually GRUB is password protected. You can't change the GRUB settings if you don't know the password.

[miksuh]

And if you password protect the bios and disable booting from floppy, cd/dvd, usb-media, network etc then it's even harder to "hack".

[My1name1is1Emor]

Where does booting removable storage devices, and GRUB commands meet? Lolz.

EMZ=]

[miksuh]

"Where does booting removable storage devices, and GRUB commands meet?"

I did not say they do. I just meant that if you disable booting from removable devices then nonone can boot from them. If you can boot using eg. floppy or cd, then you can modify GRUB on harddisk even if GRUB is password protected.

[My1name1is1Emor]

Lol, it just seemed a bit un-related to what you were replying to. But, y'ah, you're right.

EMZ=]

[AdamBailey9]

When you boot from other devices and mount the bootable partition for changing GRUB's settings

[schmucz]

was this suppose to be entering the system on to single level mode and changing the passwd ??

[linux786]

You have forgotten one VERY IMPORTANT thing. ALL SERVERS, which are not kept in physically restricted areas ALWAYS have a GRUB BOOTLOADER PASSWORD. And there is NO WAY to bypass the bootloader password, without which, the system won't boot!

The runlevel S/s is used when due to some reason, you need to debug/maintain or use the system without the 'inittab' file being read. It has a practical utility, that is why it is there. This is by now standards, a hack!

[QuillOmega0]

Yep thats the way to do it.

[RandomEvilOfNinja]

It's such a pity that anyone with access to your PC can hack you, but at least you can have encryption.

[mrmartinmartin]

This isn't realy hacking seen as your just using the bootloader to bring up a root shell.

Anyone with physical access to the machine can get root.

[carlostinonsa]

Ummm but this is not and if is considered a hack is not Usefull is we are thinking fuck the account of a Linux Server, simple, because you need a psisical access to do it right, and that is a difficult, and just to get root account, i know is root, but theres another ways to get it without entering into a place.

[ssllaaddee]

Its hacking your own cpu ... Dont forget the password n you wont have to go through the whole "Rebooting" process. Cracking another Linux box from the place you sit would be nice to see though. =)

[hacker1996]

thank you i though i was gonna have to reinstall linux on laptop so i could get root

[kaiomatico]

=) awesome :)

[maximilianxp]

nu prea am inteles ce a vrut sa faca.....

[anukefromrussia]

a schimbat parola de la root din GRUB

[zrappaz]

Hehe....

[verbosesnake]

funny

[DusteDdekay]

this is not a hack, it is a common known way of resetting a root password in case you forgot it.

[ibanez697]

I think restarting a server would cause enough alarm to get caught.

[Ropechoborra]

Is not difficult to block lilo or grub xP

[telcouser]

nice

[anointed852003]

unless I'm mistaken...that looks alot like a sneaky way to get into single user mode

[Shoot3r101]

This AND all techniques of getting the linux pass from most distro's has been fixed. nice find though.

[hallowenator]

i guess we can restart using a rescue CD, then chroot and change pass :)

however, most servers dont allow physical access like this :)

[jamsgbof]

yea most of what needs to be said already has, but this is a known work around, and besides its linux, its designed so that you can get around your pass with ease, but to fit in with the other comments, i'll say works like kernal, and stack, err err heres a good one, Grub loader, becuase it couldn't be a hardcore geek post with out the Mighty grub. .h

[psychobobek]

yeah but it would be nice if you write on which distr(kernel?). this works and on which it isn't...

[SketchyPhoenix]

debian gnu/linux kernel 2.6.8-2-386

[linuxx0r]

it works on any distribution if the sysadmin hasn't turned boot parameters off