Porteus penetration

Talk here about security in general. Posting illegals software is prohibited. All stuffs in this forum must be considered as for "Educational purpose only".
Post Reply
User avatar
brokenman
Site Admin
Site Admin
Posts: 5503
Joined: 27 Dec 2010, 03:50
Distribution: Porteus v3.2rcX all desktops
Location: Brazil
Contact:

Porteus penetration

Post#1 by brokenman » 29 Aug 2015, 21:48

So you sit down at a stock standard vanilla version of Porteus v3.1 and you are looking at a guest console prompt. What do you look at to see if you can own it?
How do i become super user?
Wear your underpants on the outside and put on a cape.

User avatar
francois
Contributor
Contributor
Posts: 4987
Joined: 28 Dec 2010, 14:25
Distribution: kde xfce porteus manjaro kubun
Location: Enfin l'été, le changement climatique attendu: le soleil.

Re: Porteus penetration

Post#2 by francois » 30 Aug 2015, 03:42

Code: Select all

root@porteus:~#
Voltaire: Le mieux est l'ennemi du bien.

donald
Full of knowledge
Full of knowledge
Posts: 1175
Joined: 17 Jun 2013, 13:17
Distribution: Porteus 3.2.2 XFCE 32bit
Location: Germany

Re: Porteus penetration

Post#3 by donald » 30 Mar 2017, 22:29

Porteus 3.2.2 xfce 32bit

Code: Select all

guest@porteus:~$ sudo /bin/bash
Password: (guest)
root@porteus:/home/guest# passwd
Changing password for root
Enter the new password (minimum of 5 characters)
Please use a combination of upper and lower case letters and numbers.
New password: 
Re-enter new password: 
passwd: password changed.
root@porteus:/home/guest# 
root@porteus:/home/guest# exit
exit
guest@porteus:~$ su
Password: (the new root Pw)
root@porteus:/home/guest# 
8)

User avatar
francois
Contributor
Contributor
Posts: 4987
Joined: 28 Dec 2010, 14:25
Distribution: kde xfce porteus manjaro kubun
Location: Enfin l'été, le changement climatique attendu: le soleil.

Re: Porteus penetration

Post#4 by francois » 31 Mar 2017, 01:32

I thought I was the only one doing necro bumping on this forum. :no:
Voltaire: Le mieux est l'ennemi du bien.

donald
Full of knowledge
Full of knowledge
Posts: 1175
Joined: 17 Jun 2013, 13:17
Distribution: Porteus 3.2.2 XFCE 32bit
Location: Germany

Re: Porteus penetration

Post#5 by donald » 31 Mar 2017, 01:48

^
francois, I just didn't want to write an extra Tutorial:

Porteus 3.2.2
"How to" easily take over the root account.. :wink:

btw
another example of this sudo crap
Re: NetMan storing passwords as clear text (Post by donald #52636)

Post Reply