Re: [Full-disclosure] Root password change

Michael Holstein wrote:
> > Isn't it easier to boot into single user mode and reset the password? It
> > doesn't require you to load the live CD which is one less step.
>
>
> depends on if they setup 'console' as insecure or not in /etc/ttys.

Setuid script on /tmp?
Given that /tmp isn't mounted with correct flags of course,

And given that you're really the legitimate root on the machine.
Otherwise it's social engineering and race conditions.

But for a legitimate root, just boot -s on a cd, mount the / of the boot disk 
in rw and change the pw.

And if you're not the legitimate root, do you really expect us to tell you how?

White hats won't beacause it's wrong, black hats wont's because it's not funny, 
and gray hats won't because it's not intresting.

--
// hdw

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/