Stealing Root

I just stole root access on a server. 😛 I have a friend who is paying for a dedicated server. Only the host doesn’t give root access. (which sucks, as we need to chown/chmod stuff from time to time)  Well, the server is running Plesk, and apparently, Plesk allows you to run cron jobs as root. Oh, really? So, I just made a cron that appended the /etc/passwd and /etc/shadow files to create an evil root twin.

Took all of ten minutes.

Advertisements

3 Responses to “Stealing Root”

  1. Dan Says:

    Haha! Nice.

    Now go to bed so you can be up before 9:00AM else jesse and I will be there to wake you up at 9:00AM for our breakfast burritos.

  2. Gliebster Says:

    You’re a bad boy.

    Good thing I don’t use Plesk. 🙂

  3. Mark Says:

    Well, this wasn’t a user account, it was the admin account on Plesk.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s


%d bloggers like this: