Stealing Root

I just stole root access on a server. 😛 I have a friend who is paying for a dedicated server. Only the host doesn’t give root access. (which sucks, as we need to chown/chmod stuff from time to time)  Well, the server is running Plesk, and apparently, Plesk allows you to run cron jobs as root. Oh, really? So, I just made a cron that appended the /etc/passwd and /etc/shadow files to create an evil root twin.

Took all of ten minutes.


3 Responses to “Stealing Root”

  1. Dan Says:

    Haha! Nice.

    Now go to bed so you can be up before 9:00AM else jesse and I will be there to wake you up at 9:00AM for our breakfast burritos.

  2. Gliebster Says:

    You’re a bad boy.

    Good thing I don’t use Plesk. 🙂

  3. Mark Says:

    Well, this wasn’t a user account, it was the admin account on Plesk.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: