Unix/Linux Go Back    


Security Discuss UNIX and Linux computer and network security, cyber security, cyber attacks, IT security, and more.

Password Recovery

Security


Closed    
 
Thread Tools Search this Thread Display Modes
    #1  
Old Unix and Linux 06-23-2004
norsk hedensk norsk hedensk is offline Forum Advisor  
Registered User
 
Join Date: Jul 2002
Last Activity: 26 May 2006, 8:38 PM EDT
Location: new york
Posts: 1,025
Thanks: 0
Thanked 1 Time in 1 Post
Password Recovery

Perderabo has made posted a good thread in the FAQ section here: Lost root password / Can't login as root
The Following User Says Thank You to norsk hedensk For This Useful Post:
prabir (07-31-2011)
Sponsored Links
    #2  
Old Unix and Linux 01-05-2006
woter324 woter324 is offline
Registered User
 
Join Date: Jan 2006
Last Activity: 5 January 2006, 8:17 PM EST
Posts: 1
Thanks: 0
Thanked 0 Times in 0 Posts
Root password: Embedded Linux

Sorry if this is the wrong place, but this version of linux is not covered and it is a little different.

I have bought a NAS box: Freecom FSG-3. It has a linux file system that I can get to through PuTTY via SSH. The file system looks and behaves as one might expect a linux box to...

I want to play; improve things like their screwed up web pages etc. However Freecom are playing Big Brother on me and won't give me the root password. (no supprise there). I did offer to let them connect and change it to something and give the new one to me.

Anyway, from PuTTY I have done a "uname -a" to find the kernel. it returns:

Linux ANAS01 2.4.27-uc1 #1185 Fr Nov 18 11:37:24 CET 2005 armv5b unknown

ANAS01 is the hostname of the box. I took the date and time out of it and googled it. The most likely result was: http://www.uclinux.org. It appears to be an embedded version of linux.

Doing a "cd /", "ls" I get:

/ $ ls
bin etc lib root tmp var
dev home proc sbin usr zImage
/ $


I've tried "vi -R /etc/passwd" changing admin 0:0 but ":w!" doesn't write. (not supprised)

I've gone through the forum looking for help, but as i'm not at the console (as it were) I can't see the suggestions will work.

I have though about taking the drive out of the NAS and booting it like a normal drive however, forgive me for my ignorance, but i presume an embedded system referes to the OS being an a chip, therefore removing the drive would not help.

If anybody has any ideas, I'd greatly appreciate it. If you hadn't already guessed i'm a novice at linux so answers for dummies would be appreciated.

Many thanks in advance.

Woter

Last edited by woter324; 01-05-2006 at 08:17 PM..
Sponsored Links
    #3  
Old Unix and Linux 03-29-2006
jallport jallport is offline
Registered User
 
Join Date: Mar 2006
Last Activity: 17 August 2008, 5:29 AM EDT
Location: UK
Posts: 11
Thanks: 0
Thanked 0 Times in 0 Posts
PLEASE NOTE: I do not condone the cracking of other people's passwords for anything other than authorised penetration testing and security analysis.

However, if you have 'forgotten' a password for one of your own boxes and still have telnet/SSH access to the box via another account you could try this:

[Summary]
You'll need an offline copy of /etc/passwd and something to generate hashes against a wordlist or brute-force strings.

[Method]
You could 'cat /etc/passwd' and copy/paste from puTTY to (e.g.) Notepad [I assume you're SSH'ing from a Windoze box since you're using puTTY]

You then need something like John The Ripper, a quick machine, and patience.
    #4  
Old Unix and Linux 03-30-2006
thnxm thnxm is offline
Registered User
 
Join Date: Mar 2006
Last Activity: 30 March 2006, 2:30 PM EST
Posts: 3
Thanks: 0
Thanked 0 Times in 0 Posts
password recovery

thanks for the above but don't have access via another box how can i recover the password
Sponsored Links
    #5  
Old Unix and Linux 03-30-2006
jallport jallport is offline
Registered User
 
Join Date: Mar 2006
Last Activity: 17 August 2008, 5:29 AM EDT
Location: UK
Posts: 11
Thanks: 0
Thanked 0 Times in 0 Posts
You're basically trying to get hold of /etc/passwd. This is a text file which has to be readable by ANY user account on that box, try telnet, SSH or ftp to attach. Another way in (usable on equisys netpilots, for instance, where there are no shell accounts and ftp sessions are chroot'ed), check to see if you have an httpd server with SSI (that's server-side includes, not SSL: secure socket layer) enabled and 'hash-bit-exec' enabled (this can all be switched on from a .htaccess file with apache, see apache.org) you cat put a "<!--#exec cmd='/bin/cat /etc/passwd' -->" in an HTML page which, when viewed, will show the result of cat'ing /etc/passwd, i.e. the contents thereof.

If you have no other way of getting access via a shell, ftp client, browser etc. then it's a case of pull the HDD out of the production server, bang it into a friendly (i.e. your) *NIX box and mount it thereon.

P.S. These are obviously generic instructions. For the NAS box that started this thread you evidently have some form of shell access so no probs.

Last edited by jallport; 03-30-2006 at 02:26 PM..
Sponsored Links
    #6  
Old Unix and Linux 11-24-2010
Praveen_218 Praveen_218 is offline
Registered User
 
Join Date: Feb 2008
Last Activity: 6 August 2017, 11:32 AM EDT
Location: Linux Machines @Mumbai & Bangalore
Posts: 169
Thanks: 9
Thanked 28 Times in 26 Posts
Quote:
Originally Posted by woter324 View Post

I have though about taking the drive out of the NAS and booting it like a normal drive however, forgive me for my ignorance, but i presume an embedded system referes to the OS being an a chip, therefore removing the drive would not help.

If anybody has any ideas, I'd greatly appreciate it. If you hadn't already guessed i'm a novice at linux so answers for dummies would be appreciated.

Many thanks in advance.

Woter
Take the drive out, if you can and try using a USB jacket to connect the same to another Linux machile.

Mount this drive anywhere in your Linux machine and replace /etc/passwd and /etc/shadow file.

You may use your this Linux machine's files; anyways you know the superuser password (of this Linux host) to log into your that device when you replace the drive back.

Just try this and let me know the results !!!!!!!!!!!!!!!!!!!!

Linux
Sponsored Links
    #7  
Old Unix and Linux 11-24-2010
DukeNuke2's Unix or Linux Image
DukeNuke2 DukeNuke2 is online now Forum Staff  
Soulman
 
Join Date: Jul 2006
Last Activity: 24 September 2017, 6:39 PM EDT
Location: Berlin, Germany
Posts: 5,698
Thanks: 73
Thanked 302 Times in 288 Posts
no need for gravedigging... thread closed!
Sponsored Links
Closed

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Linux More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
password recovery pp_mcgee Security 4 09-01-2010 12:49 AM
password recovery congo00000001 Forum Support Area for Unregistered Users & Account Problems 3 07-25-2007 06:58 PM
Password Recovery ejbrever UNIX for Dummies Questions & Answers 2 08-22-2006 06:35 PM
help for db password recovery northwind Shell Programming and Scripting 1 03-28-2005 11:05 AM
Password recovery rm -r * UNIX for Dummies Questions & Answers 8 09-17-2004 12:55 PM



All times are GMT -4. The time now is 07:04 PM.