Password Recovery


 
Thread Tools Search this Thread
Special Forums Cybersecurity Password Recovery
# 1  
Old 06-23-2004
Password Recovery

Perderabo has made posted a good thread in the FAQ section here: Lost root password / Can't login as root | Unix Linux Forums | Answers to Frequently Asked Questions
This User Gave Thanks to norsk hedensk For This Post:
# 2  
Old 01-05-2006
Root password: Embedded Linux

Sorry if this is the wrong place, but this version of linux is not covered and it is a little different.

I have bought a NAS box: Freecom FSG-3. It has a linux file system that I can get to through PuTTY via SSH. The file system looks and behaves as one might expect a linux box to...

I want to play; improve things like their screwed up web pages etc. However Freecom are playing Big Brother on me and won't give me the root password. (no supprise there). I did offer to let them connect and change it to something and give the new one to me.

Anyway, from PuTTY I have done a "uname -a" to find the kernel. it returns:

Linux ANAS01 2.4.27-uc1 #1185 Fr Nov 18 11:37:24 CET 2005 armv5b unknown

ANAS01 is the hostname of the box. I took the date and time out of it and googled it. The most likely result was: http://www.uclinux.org. It appears to be an embedded version of linux.

Doing a "cd /", "ls" I get:

/ $ ls
bin etc lib root tmp var
dev home proc sbin usr zImage
/ $


I've tried "vi -R /etc/passwd" changing admin 0:0 but ":w!" doesn't write. (not supprised)

I've gone through the forum looking for help, but as i'm not at the console (as it were) I can't see the suggestions will work.

I have though about taking the drive out of the NAS and booting it like a normal drive however, forgive me for my ignorance, but i presume an embedded system referes to the OS being an a chip, therefore removing the drive would not help.

If anybody has any ideas, I'd greatly appreciate it. If you hadn't already guessed i'm a novice at linux so answers for dummies would be appreciated.

Many thanks in advance.

Woter

Last edited by woter324; 01-05-2006 at 09:17 PM..
# 3  
Old 03-29-2006
PLEASE NOTE: I do not condone the cracking of other people's passwords for anything other than authorised penetration testing and security analysis.

However, if you have 'forgotten' a password for one of your own boxes and still have telnet/SSH access to the box via another account you could try this:

[Summary]
You'll need an offline copy of /etc/passwd and something to generate hashes against a wordlist or brute-force strings.

[Method]
You could 'cat /etc/passwd' and copy/paste from puTTY to (e.g.) Notepad [I assume you're SSH'ing from a Windoze box since you're using puTTY]

You then need something like John The Ripper, a quick machine, and patience.
# 4  
Old 03-30-2006
password recovery

thanks for the above but don't have access via another box how can i recover the password
# 5  
Old 03-30-2006
You're basically trying to get hold of /etc/passwd. This is a text file which has to be readable by ANY user account on that box, try telnet, SSH or ftp to attach. Another way in (usable on equisys netpilots, for instance, where there are no shell accounts and ftp sessions are chroot'ed), check to see if you have an httpd server with SSI (that's server-side includes, not SSL: secure socket layer) enabled and 'hash-bit-exec' enabled (this can all be switched on from a .htaccess file with apache, see apache.org) you cat put a "<!--#exec cmd='/bin/cat /etc/passwd' -->" in an HTML page which, when viewed, will show the result of cat'ing /etc/passwd, i.e. the contents thereof.

If you have no other way of getting access via a shell, ftp client, browser etc. then it's a case of pull the HDD out of the production server, bang it into a friendly (i.e. your) *NIX box and mount it thereon.

P.S. These are obviously generic instructions. For the NAS box that started this thread you evidently have some form of shell access so no probs.

Last edited by jallport; 03-30-2006 at 03:26 PM..
# 6  
Old 11-24-2010
Quote:
Originally Posted by woter324

I have though about taking the drive out of the NAS and booting it like a normal drive however, forgive me for my ignorance, but i presume an embedded system referes to the OS being an a chip, therefore removing the drive would not help.

If anybody has any ideas, I'd greatly appreciate it. If you hadn't already guessed i'm a novice at linux so answers for dummies would be appreciated.

Many thanks in advance.

Woter
Take the drive out, if you can and try using a USB jacket to connect the same to another Linux machile.

Mount this drive anywhere in your Linux machine and replace /etc/passwd and /etc/shadow file.

You may use your this Linux machine's files; anyways you know the superuser password (of this Linux host) to log into your that device when you replace the drive back.

Just try this and let me know the results !!!!!!!!!!!!!!!!!!!!

Smilie
# 7  
Old 11-24-2010
no need for gravedigging... thread closed!
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Homework & Coursework Questions

Password recovery in login script help

Use and complete the template provided. The entire template must be completed. If you don't, your post may be deleted! 1. The problem statement, all variables and given/known data: Hi guys. My case study is about creating a script that includes password recovery whenever a user forgets... (1 Reply)
Discussion started by: jenimesh19
1 Replies

2. Shell Programming and Scripting

bash script for password recovery

Hi all, I'm a complete newbie to bash scripting, although I have some experience in programming. The thing is that I have a .dmg file on my mac which I protected with a password, and now I've forgotten it. I remember the first few letters of the password and the characters that represent the... (4 Replies)
Discussion started by: sujay.jauhar
4 Replies

3. Cybersecurity

password recovery

I am trying to access an old email account but cannot recall the password and the backup email account has been closed, also. I need instructions or an expert who can assist recovering my password for web-based email account. (4 Replies)
Discussion started by: pp_mcgee
4 Replies

4. Solaris

Password Recovery From /etc/shadow file

Is it possible to reset a normal user password , by editing password field in /etc/shadow file? Thanks (6 Replies)
Discussion started by: ksvaisakh
6 Replies

5. UNIX for Dummies Questions & Answers

Solaris 8 password recovery plz HELP!!!!!

Hello board, I'm new to Solaris Linux world, trying to learn on my onw, as I notice the windows is a big fraud.... OK let me get to my issue: I have a SOlaris 8 X86 that I don;t have a password and even the screen is disabled(assuming for the security reasons) I just see a... (8 Replies)
Discussion started by: nexOne
8 Replies

6. Forum Support Area for Unregistered Users & Account Problems

password recovery

hello, my password got lost - and your service to generate new passwords does not work -ive tried it out 50 times the last week or so, never got a single mail from it... please generate a new password for my account "congo" with mailadress. thanks. Thomas (3 Replies)
Discussion started by: congo00000001
3 Replies

7. UNIX for Dummies Questions & Answers

Password Recovery

Hi, I am new to unix and I set a password for a user and now I need to recover what that password was. Is there a way, where as root, I can view what a users passwords is? Thanks, Eric (2 Replies)
Discussion started by: ejbrever
2 Replies

8. Shell Programming and Scripting

help for db password recovery

hi,all my database (.db) is created by sysbase adaptive server anywhere7.0 ! the user id is DBA. but I lost the password . Could you recovery the passwrod of this db file? thanks ! iwind (1 Reply)
Discussion started by: northwind
1 Replies

9. UNIX for Dummies Questions & Answers

Password recovery

We recently terminated a developer at my place of employment who created scripts on a windows server (that i do not have access to) that invoke FTP sessions on my UnixWare 7.1.1 servers. I need to know the password that is being used. Does anyone know of a good password crack? (8 Replies)
Discussion started by: rm -r *
8 Replies

10. UNIX for Dummies Questions & Answers

How to password recovery on Ultrix

I got myself a dec 5100 running ultrix with unknow password, how do i recover or change the root password on it? (10 Replies)
Discussion started by: cybermike
10 Replies
Login or Register to Ask a Question