« previous next »
Pages: [1] 2

Author Topic: Aww man no Unix Bash shell sig  (Read 2206 times)

Nikolia

  • Hydlaa Resident
  • *
  • Posts: 124
    • View Profile
Aww man no Unix Bash shell sig
« on: November 18, 2004, 04:15:49 pm »
$ open 206.47.32.7
connecting....
   Login: Nikola
   Password:  *****

$ Connected Welcome to 1334 shell, have fun =)
$ ./NTC
$ Now scanning....
$ Shadow File found...
$ Re83Nk47T49D74Lh4s2rR $ su root
$ password:                          
$
$whoami
$root
$ cd ..
$ cd root
$ vi bash.rc

echo \"Connected Welcome to 1334 shell, have fun =)\"
Q>
$
$ vi bash.rc
echo \"welcome to lame-box, have a nice day =0\"
>W

$ passwd
$ Enter new root password> ***********
$ Again> **********
$ rm -rf .bash_history
$ logout


most of it I made up... but I wanted it for my sig :( ohwell
Logged

Moogie

  • Forum Legend
  • *
  • Posts: 4551
  • Artist/Flash Animator
    • View Profile
(No subject)
« Reply #1 on: November 18, 2004, 04:30:40 pm »
Um.... riiiight... does this thread have a point, or an understandable meaning? :P
Logged

Nikolia

  • Hydlaa Resident
  • *
  • Posts: 124
    • View Profile
(No subject)
« Reply #2 on: November 18, 2004, 05:04:45 pm »
you see he logs into he\'s bash shell (bsh)
he connects to 206.47.32.7
he puts in hes username/pass
He runs NTC (Nikola The Cracker)
He find the shadowed password cracks it.
He Sus to root (logs into root)
he does the whoami command to make sure hes in root
He Travels to the systems bash.rc file then he changes the message from \"Connected Welcome to 1334 shell, have fun =) \" to \"\"welcome to lame-box, have a nice day =0\"

He then changes the root password
He deletes the log file, then he logs out

...weee I guess I was just bored, and I felt like putting a creative mind to use :P
Logged

Annah

  • Veteran
  • *
  • Posts: 1122
    • View Profile
(No subject)
« Reply #3 on: November 18, 2004, 05:59:43 pm »
Ok, never dare to call me  crazy again 0.o
Logged
- Black Order -

SirJunkie

  • Wayfarer
  • *
  • Posts: 9
    • View Profile
(No subject)
« Reply #4 on: November 18, 2004, 08:14:59 pm »
C:\\>wtf
Ok
C:\\>
Logged

Myrtl

  • Hydlaa Citizen
  • *
  • Posts: 496
    • View Profile
(No subject)
« Reply #5 on: November 18, 2004, 09:27:26 pm »
Thats WAY too big to put in your sig!! Youd get it taken off it you did. But you could change the size of it...but even then it would be too big.
Logged
Non nobis Domine, non nobis sed Nomini Tuo da Gloriam
Not for us O Lord, not for us but in Your Name is the Glory

In-game: Myrtl Shift

Rank: Seneshal of The Knights Templar

Join The Knights Templar at
http://www.freewebs.com/the-knights-templar/

Androgos

  • Guest
(No subject)
« Reply #6 on: November 18, 2004, 09:30:05 pm »
Ok, just let me take this :P :

1. The standard telnet console doesn\'t use $, but maybe you use customize software?
2. Whoami isn\'t really requierd to use to see if you\'re root, since the console sign changes to a # IIRC, which it btw doesn\'t do in your sign thing
3. Why do all the program send its output to the bash shell (noticed by that every line have a $)?
4. Why not delete connection logs?
5. Isn\'t the passwords MD5 hashed? So it would generaly take long time to crack. But since you don\'t have any timestamps, I guess it maybe were there in.. well.. about 1 day - 4 weeks or so?
6. What\'s the point of all this?

Thanks for me :)
Logged

Shadowfalcon

  • Hydlaa Citizen
  • *
  • Posts: 256
    • View Profile
(No subject)
« Reply #7 on: November 18, 2004, 09:32:24 pm »
C:\\DOS>
C:\\DOS>run
Bad command or file name. User is incompetent. Please replace user.
Logged

Seytra

  • Forum Addict
  • *
  • Posts: 2052
  • No system can compensate lack of common sense.
    • View Profile
(No subject)
« Reply #8 on: November 18, 2004, 09:47:54 pm »
Quote
Originally posted by Androgos
Ok, just let me take this :P :

1. The standard telnet console doesn\'t use $, but maybe you use customize software?
2. Whoami isn\'t really requierd to use to see if you\'re root, since the console sign changes to a # IIRC, which it btw doesn\'t do in your sign thing
3. Why do all the program send its output to the bash shell (noticed by that every line have a $)?
4. Why not delete connection logs?
5. Isn\'t the passwords MD5 hashed? So it would generaly take long time to crack. But since you don\'t have any timestamps, I guess it maybe were there in.. well.. about 1 day - 4 weeks or so?
6. What\'s the point of all this?

Thanks for me :)

Not to mention that if you\'re stupid enough to give any non-root user read-access to the shadow file, you just deserve to be hacked. Also if you allow users to execute stuff that you did not put on the system, i.e. if you do not mount the /home and /temp folders \"noexec\".

# rm -Rf /
« Last Edit: November 18, 2004, 09:48:37 pm by Seytra »
Logged

Shadowfalcon

  • Hydlaa Citizen
  • *
  • Posts: 256
    • View Profile
(No subject)
« Reply #9 on: November 18, 2004, 09:58:45 pm »
all very good points. So what was the point of this thread?
Logged

Seytra

  • Forum Addict
  • *
  • Posts: 2052
  • No system can compensate lack of common sense.
    • View Profile
(No subject)
« Reply #10 on: November 18, 2004, 10:59:23 pm »
I think the point is that Nikolia just found out that the sig may not contain one page of text (which shouldn\'t surprise anyone, but anyway), and wanted to share this discovery with us...
Logged

Nikolia

  • Hydlaa Resident
  • *
  • Posts: 124
    • View Profile
(No subject)
« Reply #11 on: November 19, 2004, 01:31:08 am »
Lol Androgos, I Knew some one was going to catch me out..
but honestly I did\'nt think anyone here was that advanced
and yeah I wrote it at 3am while I was doing something else.
I just guess I was bored and I wanted to share it.
Alot of things dont make sence in that strange shell lol

I know lets all worked together to fix it! :P
Logged

Annah

  • Veteran
  • *
  • Posts: 1122
    • View Profile
(No subject)
« Reply #12 on: November 19, 2004, 12:34:17 pm »
Somebody shoot him fast, until he\'ll start infecting the whole system 0.o
 * runs and hides *
Logged
- Black Order -

Androgos

  • Guest
(No subject)
« Reply #13 on: November 19, 2004, 03:37:15 pm »
Quote
Originally posted by Nikolia
but honestly I did\'nt think anyone here was that advanced


Hey, we are only programming one of the most advanced game types there is :P
Logged

hook

  • Veteran
  • *
  • Posts: 1088
    • View Profile
    • Hook's Humble Homepage
(No subject)
« Reply #14 on: November 19, 2004, 03:46:00 pm »
it DID look suspicious to me ...or at least not bash-y at all ...but i didn\'t even think it worth commenting - i thought this thread got locked?

[edit by hook]
erm ...you need to be advanced to tell a bash shell from a wierd thing?
[/edit]
« Last Edit: November 19, 2004, 03:47:12 pm by hook »
Logged
:emerald: The Treecastle *will* stand !!! :emerald:

in-game name: Seeln
Pages: [1] 2
« previous next »