Porteus penetration

Talk here about security in general. Posting illegals software is prohibited. All stuffs in this forum must be considered as for "Educational purpose only".
User avatar
brokenman
Site Admin
Site Admin
Posts: 6105
Joined: 27 Dec 2010, 03:50
Distribution: Porteus v4 all desktops
Location: Brazil

Porteus penetration

Post#1 by brokenman » 29 Aug 2015, 21:48

So you sit down at a stock standard vanilla version of Porteus v3.1 and you are looking at a guest console prompt. What do you look at to see if you can own it?
How do i become super user?
Wear your underpants on the outside and put on a cape.

User avatar
francois
Contributor
Contributor
Posts: 6434
Joined: 28 Dec 2010, 14:25
Distribution: xfce plank porteus nemesis
Location: Le printemps, le printemps, le printemps... ... l'hiver s'essoufle.

Re: Porteus penetration

Post#2 by francois » 30 Aug 2015, 03:42

Code: Select all

root@porteus:~#
Prendre son temps, profiter de celui qui passe.

donald
Full of knowledge
Full of knowledge
Posts: 2063
Joined: 17 Jun 2013, 13:17
Distribution: Porteus 3.2.2 XFCE 32bit
Location: Germany

Re: Porteus penetration

Post#3 by donald » 30 Mar 2017, 22:29

Porteus 3.2.2 xfce 32bit

Code: Select all

guest@porteus:~$ sudo /bin/bash
Password: (guest)
root@porteus:/home/guest# passwd
Changing password for root
Enter the new password (minimum of 5 characters)
Please use a combination of upper and lower case letters and numbers.
New password: 
Re-enter new password: 
passwd: password changed.
root@porteus:/home/guest# 
root@porteus:/home/guest# exit
exit
guest@porteus:~$ su
Password: (the new root Pw)
root@porteus:/home/guest# 
8)

User avatar
francois
Contributor
Contributor
Posts: 6434
Joined: 28 Dec 2010, 14:25
Distribution: xfce plank porteus nemesis
Location: Le printemps, le printemps, le printemps... ... l'hiver s'essoufle.

Re: Porteus penetration

Post#4 by francois » 31 Mar 2017, 01:32

I thought I was the only one doing necro bumping on this forum. :no:
Prendre son temps, profiter de celui qui passe.

donald
Full of knowledge
Full of knowledge
Posts: 2063
Joined: 17 Jun 2013, 13:17
Distribution: Porteus 3.2.2 XFCE 32bit
Location: Germany

Re: Porteus penetration

Post#5 by donald » 31 Mar 2017, 01:48

^
francois, I just didn't want to write an extra Tutorial:

Porteus 3.2.2
"How to" easily take over the root account.. :wink:

btw
another example of this sudo crap
Re: NetMan storing passwords as clear text (Post by donald #52636)

Post Reply