Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: help: I need to crack my box
From: Paul Schmehl <pschmehl_lists () tx rr com>
Date: Mon, 21 Jul 2008 18:21:13 -0500

--On Monday, July 21, 2008 22:47:26 +0200 Lucio Crusca <lucio () sulweb org> wrote:

Believe it or not, I have a linux box (mine, yes it's mine) I need to own...
the problem is that it phisically resides a few 100km from here and someone
else has changed the root password... I can still log in as luser and I
wonder if I have a chance to become root again. It's a more or less current
debian lenny i386 with gnome. Have you got anything for me?

Ask the hosting company if they have an ipkvm they can connect to the box.  If 
they do, you can reboot and go into single user mode and reset the root 
password.  I would then take down the net interfaces until you clean the box. 
Otherwise your info might be disclosed while you're working on it.

If you can't reboot it remotely, have their staff reboot it for you while 
you're logged in to the ipkvm.  Then get into single user mode and regain 
control of the box.

Paul Schmehl
As if it wasn't already obvious,
my opinions are my own and not
those of my employer.

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]