root access...
Page 1 of 3 123 LastLast
Results 1 to 10 of 21

Thread: root access...

  1. #1
    Banned
    Join Date
    Jul 2004
    Posts
    12

    root access...

    HI GEEKS..
    WELL I M INTERESTED IN comp the first day i got my hands on it..
    n m curious abt each process executed by every command i execute,,,
    i mean the deamons ,background processes .. the unseen processes.
    soo i also had one thing in my mind ever since then..
    many a times i have seen nuts posed as comp geeks in films..trying to get root access..
    n ofcourse they don't have the password,..
    so on the login screen the console screen pops out of no where n they start writing scripts..
    using all buffer overflows n injections..
    soo i wanna know that to wat extent its really possible..
    i think u guys can really help me out..
    newbie..

  2. #2
    Leftie Linux Lover the_JinX's Avatar
    Join Date
    Nov 2001
    Location
    Beverwijk Netherlands
    Posts
    2,535
    If you have physical access to a linux computer, chances are the only thing you'll have to do is enter init=/bin/bash rw in the Lilo prompt after the selected kernel image..

    9 out of 10 standard installations will geve you root access

    Using buffer overflows etc only works on "services" the computer is provinding (like http, ftp, ssh)..
    ASCII stupid question, get a stupid ANSI.
    When in Russia, pet a PETSCII.

    Get your ass over to SLAYRadio the best station for C64 Remixes !

  3. #3
    Banned
    Join Date
    Jul 2004
    Posts
    12
    thanx jinx..
    it would be of good help..
    i also wanna know that the way i boot windows using lilo or grub..
    can i also boot linux using ntldr windows boootloader..
    i have read thats possible bt don't exactly know how..
    plz help me out

  4. #4
    Leftie Linux Lover the_JinX's Avatar
    Join Date
    Nov 2001
    Location
    Beverwijk Netherlands
    Posts
    2,535
    More on prevention of lilo misuse can be found here: http://printf.nl/?lilo+root

    Yes, it's possible to use loadlin.exe for that..
    But won't work (good/at all) with NTFS..
    You do need to copy your vmlinuz (kernel image) to the windows partition and setup the NTLDR to start loadlin.exe..
    I havn't done this on NT (just win98 years ago)..

    And I won't recommend using loadlin !
    ASCII stupid question, get a stupid ANSI.
    When in Russia, pet a PETSCII.

    Get your ass over to SLAYRadio the best station for C64 Remixes !

  5. #5
    AO Senior Cow-beller
    Moderator
    zencoder's Avatar
    Join Date
    Dec 2004
    Location
    Mountain standard tribe.
    Posts
    1,177

    nah, there's a better way

    Jinxy (and ash) there's an easier way to dual boot and launch linux from the windows loader. I keep saying Imma write a tut, but haven't gotten around to it. Here's the extremely abbreviated version.

    You will need:
    1 computer (with floppy drive)
    1 windows installation on computer
    1 linux install media


    Setup windows to run normally. leave a partition big enough for the linux install.

    Install linux on the extra partition(s). Make sure you have the install process create a boot floppy, or this get's a LOT harder for the newbie/non-experienced. Make sure linux installs grub/lilo at the beggining of the linux partion, not the MBR or Superblock.

    Boot linux (via floppy) and login. Use the dd command to create a file from the first sector of the Linux partition (this is where the grub thingy (Binary? Loader?) is located).

    Copy the file you just created to the Windows partition (probably by putting it on a floppy). I usually name it linuxldr.bin

    Boot to windows and edit your boot.ini to include a new line. The line should look like this:
    Code:
    C:\linuxldr.bin="Red Hat Enterprise Linux 3"
    If I haven't forgotten anything, this will make your system boot to the Windows 'Choose your operating system' screen, and if you select the Linux, it will then launch the Grub interface you're used to.

    Like I said, I'll write a formal tutorial with screen shots and verified commands soon.
    "Data is not necessarily information. Information does not necessarily lead to knowledge. And knowledge is not always sufficient to discover truth and breed wisdom." --Spaf
    Anyone who is capable of getting themselves made president should on no account be allowed to do the job. --Douglas Adams (1952-2001)
    "...people find it far easier to forgive others for being wrong than being right." - Albus Percival Wulfric Brian Dumbledore

  6. #6
    Socialist Utopia Donkey Punch's Avatar
    Join Date
    Sep 2004
    Location
    In the basement
    Posts
    314
    Hmm, I was just asked about movies and cracking, and if it is real or not.

    Movies are just that, movies and are usually not real.
    In loving memory of my step daughter 1987-2006

    Liberty In North Korea

  7. #7
    AO Senior Cow-beller
    Moderator
    zencoder's Avatar
    Join Date
    Dec 2004
    Location
    Mountain standard tribe.
    Posts
    1,177

    Red face

    Originally posted here by Donkey Punch
    Hmm, I was just asked about movies and cracking, and if it is real or not.

    Movies are just that, movies and are usually not real.
    I can personally attest that they modeled the hacker-guy from Swordfish after my own abilities. Only they had to slow down the cracking times to make it easier to see and understand in the movie.

    really. it's true.

    they found me after my picture was taken standing on top of Building 1 of the Twin Towers, with the planes approaching in the background. terrible day that was. but it's quite a picture.
    "Data is not necessarily information. Information does not necessarily lead to knowledge. And knowledge is not always sufficient to discover truth and breed wisdom." --Spaf
    Anyone who is capable of getting themselves made president should on no account be allowed to do the job. --Douglas Adams (1952-2001)
    "...people find it far easier to forgive others for being wrong than being right." - Albus Percival Wulfric Brian Dumbledore

  8. #8
    AO BOFH: Luser Abuser BModeratorFH gore's Avatar
    Join Date
    Oct 2002
    Location
    Michigan
    Posts
    7,177
    Originally posted here by zencoder
    I can personally attest that they modeled the hacker-guy from Swordfish after my own abilities. Only they had to slow down the cracking times to make it easier to see and understand in the movie.



    Oh so you're the one who can't hold it in for more than 60 seconds because of some girl huh? Nice one. Didn't you play in another movie? Gone in 60 seconds? Which was modeled after your hold it back abilities?
    Kill the lights, let the candles burn behind the pumpkins’ mischievous grins, and let the skeletons dance. For one thing is certain, The Misfits have returned and once again everyday is Halloween.The Misfits FreeBSD
    Cannibal Holocaust
    SuSE Linux
    Slackware Linux

  9. #9
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,324
    Dual booting so that NT Bootloader has control isn't new:

    Source 1


    Source 2


    Source 3

    9 out of 10 standard installations will geve you root access
    Is this still true? This is a basic security "feature" that I thought was being removed from most of the Linuxes and that default boot security was being put in place to prevent access to single-user mode.
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage

  10. #10
    AO Senior Cow-beller
    Moderator
    zencoder's Avatar
    Join Date
    Dec 2004
    Location
    Mountain standard tribe.
    Posts
    1,177
    Originally posted here by gore
    Oh so you're the one who can't hold it in for more than 60 seconds because of some girl huh? Nice one. Didn't you play in another movie? Gone in 60 seconds? Which was modeled after your hold it back abilities?
    DOH! Good one! Guess I asked for that.

    Actually, the 'holding it in' was modeled after you. I was referring to the 'crack this 65536bit hashed password by hand in under 60 seconds' bit. That's all me. :P

    Back to reality, folks.
    "Data is not necessarily information. Information does not necessarily lead to knowledge. And knowledge is not always sufficient to discover truth and breed wisdom." --Spaf
    Anyone who is capable of getting themselves made president should on no account be allowed to do the job. --Douglas Adams (1952-2001)
    "...people find it far easier to forgive others for being wrong than being right." - Albus Percival Wulfric Brian Dumbledore

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides