Computer Forums

Member Login

Remember Me? Sign Up! | Forgot Password
 
Slogan
 
Closed Thread
Old 01-24-2005, 06:22 PM   #1 (permalink)
 
True Techie

Join Date: Nov 2004

Posts: 105

f15h is on a distinguished road

Question root. shaddow?

I need to pull a root password off a brickserver 2.

where is it? /etc/psswd?
/etc/shaddow?

help me out.

merci,

die fische.
__________________
***les poissant souples***
f15h is offline  
Old 01-24-2005, 06:33 PM   #2 (permalink)
 
Master Techie

Join Date: Apr 2004

Posts: 2,534

horndude is on a distinguished road

Default

Its shadowed and encrypted, without the hash and algorithm your going to have a tough time
horndude is offline  
Old 01-24-2005, 09:29 PM   #3 (permalink)
 
True Techie

Join Date: Nov 2004

Posts: 105

f15h is on a distinguished road

Default

i know its going to be tough... but - I know how I can decrypt an md5, assuming that its not shaddowed.

Shaddowing is an option, isn't it? Not all root pwds are shaddowed, right?

merci,

die fische
__________________
***les poissant souples***
f15h is offline  
Old 01-24-2005, 09:37 PM   #4 (permalink)
 
Master Techie

Join Date: Apr 2004

Posts: 2,534

horndude is on a distinguished road

Default

no they arent always shadowed, but normally they are by default, you can find out real quick just by looking at /etc/passwd, if it looks like gibberish its been shadowed and encrypted, ya you can crack it.If your gonna do that, use johntheripper, its a decent cracking program, uses a dictionary too if needed, that speeds things up, your still looking at a few weeks of CPU time.

oh ya, check on open discussion forum, I added a link and a sample of that ascii art library for you
horndude is offline  
Old 01-24-2005, 11:28 PM   #5 (permalink)
 
Junior Techie

Join Date: Jan 2005

Posts: 94

charles@pcfix

Default

You basically have to gain access to your machine somehow to alter the respective files. A pretty convenient way is to use the bootable installation CDs of some Linux distro and launch some "recovery console". If you can't see some comand like that you might try the ALT+F1..Fx keystroke to maybe get a clear console.

Once you have managed to get into a shell you need to mount the partition that holds your /etc directory. To reset the root password open the file /etc/passwd and look for a line starting with ...

root:x:.........

Delete the "x" in this line as it tells that the password is shadowed. Save the file.

Secondly open /etc/shadow and search for the entry for the user "root". This one usually looks like this ...

root:$s0m3fR1g9InMD5h45H:<numbers>:<more numbers>::::

Delete all values (the stuff between the columns) so that you get a line like this ...

root::::::::

Save the file, unmount the partitions and reboot. The root-account should not have set a password now, which you should change immediately again.

hope that helps
__________________
Charles

Visit my Site
http://www.pc-fix.info
charles@pcfix is offline  
Old 01-25-2005, 05:07 PM   #6 (permalink)
 
Ultra Techie

Join Date: Jan 2003

Posts: 584

mrdinkel

Default

couldn't you use the boot-from cd, chroot (root device) and reset it that way?
__________________
A+ Core Hardware, Software Certified (May 13 2005)
the new beast...

AMD Athlon XP 3200+ Barton running at 2.16 Ghz.
GeForce MX 4000 (mainly takes the load off the main system)
Creative Labs Audigy 24-bit sound.
Some Case from tigerdirect
512 MB Ultra DDR RAM.
80GB Seagate HDD
LiteOn CD-RW / DVD ROM drive.
currently looking at a litescribe drive at staples, due to its ability to label the CD shortly after being burned.
mrdinkel is offline  
 
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On