Saturday, December 24, 2011
Anu
This is the auto-rooting script that is written for Linux, SunOS, Mac OS X, and FreeBSD.
Showing posts with label Root access. Show all posts
Showing posts with label Root access. Show all posts
Saturday, December 24, 2011
Thursday, July 7, 2011
How to hack Ubuntu ROOT password?
Here
is a way to reset or hack superuser password, provided you have
physical access to reboot the system and username. All you need to do is
just reboot the system and then follow these instructions.
Friday, May 27, 2011
Root privileges in Linux...
Security researcher Dan Rosenberg presents a small demo program which combines several security holes to obtain root privileges on Linux systems on Full Disclosure Security mailing list.
He combined some existing vulnerabilities with the vulnerability discovered by Nelson Elhage
in connection with the kernel’s thread management and troubleshooting
routines (CVE-2010-4258).With this exploit, an attacker can potentially
exploit an OOPS to write a null byte into the kernel’s memory area.
Tuesday, February 15, 2011
How to become ROOT (one-click root) in Samsung Galaxy S / Android 2.x?
Z4root is one click rooting application for Android phones that can, as per the author of this app, virtually root any Android geared device. Currently, the testing APK of this root has been posted to XDA thread and mixed reponses have been observed among app testers. The z4root has been confirmed working for Samsung Galaxy S, Samsung Galaxy Tab, HTC Wildfire, Xperia X10 Mini [Eclair], Xperia X10 / X10i, and many other Android phones.
You can navigate to the official thread on XDA here to skim through board messages and check whether your device is compatible or has been tested as “working” with Z4root. We have seen plenty of other one click rooting apps like SuperOneClick, Universal Androot etc, but with Z4root, you won’t be needing a desktop application to root your device. The app is under going rigorous testing by many users and will soon be available in Market as well.
Here are the step by step instructions to root your Android device with Z4root:
- The first step is to download Z4root file from here, unzip the APK and save it on your desktop.
- Once done, connect your phone to the computer, mount SD card and copy the APK file to SD card root.
- Now launch Market on your phone and download a file manager of your choice. We recommend going with Astro File Manager.
- Once you are done downloading the file manager, launch it and follow onscreen instruction to install Z4root APK file you earlier copied to SD card root.
- Once the app is installed on your phone, launch and tap on the root button in application.
- Wait for the process to finish and reboot your device once it is done.
Please note that as this app is still in a testing mode, so you can expect some devices to not to get rooted with this. The common error that we have noticed with devices that failed to root is absence of Super User as well as busybox.
FOR 'BUSYBOX', 'SUPER ONE CLICK' AND 'SUPER USER' : GOTO THIS POSTSamsung Galaxy S with stock JPO Android 2.2 Froyo firmware has a 99 % success rate with this app. According to RyanZ, the creator of Z4root, this is the safest one click rooting app around that allegedly doesn’t messes anything up on your Android phone.
DOWNLOAD Z4root
Stay in touch with more Android hacks...
Thanks...
Friday, January 7, 2011
How to access stored user name n passwords with rundll32.exe?
The Stored User Names and Passwords applet lets you assign usernames and passwords to use when needing to authenticate yourself toservices in domains other than the one you are currently logged into. The normal way of running this applet can be difficult to find quickly,so here is a way to launch it using a desktop shortcut using the rundll32.exe program:
Click on START - RUN and type the following (follwed by ENTER):
rundll32.exe keymgr.dll,KRShowKeyMgr
Thanks...
Thursday, December 23, 2010
How to bypass firewally / How to access restricted web sites / How to hide IP?
Don't you hate it when you go toa website at school and find out that the school firewall blocks it?This guide will teach you how to bypass the web filter to access yourwebsites. This may not work on some blockages, whether you use IP orHTML.
I figured out that if you just type in "https" rather than "http" atthe beginning of the address, you can go to some sites, as mostblockers aren't configured to block secure web pages. However, somewebsites just don't work as secure pages.
Steps
Browse by IP
- Go to START - Run. Enter cmd and hit enter, or click on START - Program Files - Accessories - Command Prompt to open the Command Prompt window.
- If your school has disabled access to the command prompt, right click, go to New, and select Text Document. In the text document simply type cmd then save the file as command.bat or, if this doesn't work, command.comMake sure you switch the Save As Type field in Notepad's Save dialogueto All Files. Double Click and you have successfully gained access tothe command prompt.
- If that doesn't work, perform the following steps at home and bring the IP address to school.
- Once in the Command Prompt, enter ping x, replacing the x with any website of your choice.
You can also use the nslookup command in a similar fashion. Using the same site as an example you can type nslookup www.google.com at the command prompt. Just be sure to refer to the Non-authoritative Answer for the steps that follow.
- You will see a set of four numbers [here, 72.14.207.99] is Google's IP address.
- Open your browser window. In the address bar, type http://x.x.x.x, replacing the x's with the ping address, and hit enter [for example, http://72.14.207.99]. This will give you access to Google.
- If the web filterblocked even the IP address of the site, you can take each number inthe IP and convert it to a Hexadecimal format. Then in the browser enter http:// 0x(hex1).0x(hex2).0x(hex3).0x(hex4).
- Note: This method is very easy to trace!
Create Your Own Circumventor (similar to a proxy)
This Torrentcontaines all neccessary files to create a circumventor, which willallow students to bypass internet filters by loading internet pagesthrough another computer, and then sending them to the computer withthe filters on it, very similarly to a proxy. All directions areincluded in the torrent.Create a redirect domain
- Create an account at Dot.tkand create a ".tk" domain for that site. This works great for tworeasons. First of all, many firewalls use keyword blocking. Forexample, if the domain for a website contains the word "sex," it may beblocked regardless of what the page is actually about. Therefore, allyou need to do is give your .tk version a different name. It also worksbecause .tk is not an actual domain, rather a redirect to a domain, andprobably won't be blocked.
Browse by Proxy
- Since proxies get blocked often you should join a proxy mailing list like the one below to keep getting fresh proxies daily.
tech.groups.yahoo.com/group/fresh-proxy/join (copy/paste this in your browser)
http:// www.maverickeyes.com
These are new created proxies (January 2009):
These are new created proxies (October 2010):
- http:// www.proxyauthority.com to stay up to date on the newest proxies
- http:// proxy.techiebraindump.com
- http:// www.helpmesurf.net
- http:// www.surfingstore.info/
- http:// freebrowse.info/
- http:// surfingtoday.info/
- http:// findwealth.info/
- http:// proxy.acevpn.com/
- Try using (remove spaces) badfox . co.cc, It just came out I will update this when new ones come
- Find a proxy site. Do a search for "free online proxies". This will provide you with a list of proxies to bypass filters.
- Find a proxy site that is obviously, not blocked by the filters.
- Type the name of the site you want to access into the box. Most sites have a checkbox that says "block scripts"; it is better to uncheck this.
- Ifnone of these work, download and install Firefox and manually changethe proxy settings by going to Tools - Options - ConnectionSettings - And change the Proxy Settings to a proxy. Go to ask.com and search proxy lists.
Browse Translation
- Go to a website translation site, such as Babelfish or Google Translate
- Enter the desired site in the translate URL box and choose an obscure language to translate into English.
- Browse the site.
Host a PHP Proxy
- On an unblocked computer, find a free PHP Host like Bravenet. Make sure it has FTP Support or a way to upload PHP scripts. Create an account.
- On an unblocked computer, find a PHP Proxy script. There are many available and is usually just one file.
- Upload the PHP Proxy script to your PHP Host and test it by executing the script from your browser.
- To use it just type in the address of your script in your school.
- As an example:If you went to Bravenet, your host might be youngone.bravenet.com.Upload your proxy i.e. "snake.php", and execute it by going to"youngone.bravenet.com/snake.php". That's it.
Disable the blocker
- Some schools use proxy services (such as Bess) to do the filtering.It may be possible to disable it by going into Internet Explorer andchoosing Tools - Internet Options - Connections Tab - Lan Settingsand unchecking the "Use a proxy server for your LAN". It can bereenabled prior to leaving. In the likely event that this ability isdisabled, one can use a registry editor to change the value of"HKEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\InternetSettings\ ProxyEnable" to 0.
- Hit the go button and you will get to your favorite site!
- Check the sites that are blocked on your local computer.Open Internet Explorer, and select Tools - Internet Options. Clickthe "Security" tab and choose "Restricted Sites". The "Sites" buttonwill become available. Be sure that the site you wish to access is notlisted, if it is, highlight and delete it.
- Lower the settings for your Internet security. This is not recommended for long periods of use, as this is how viruses and copycat programs infiltrate computers.
- Install a filter-removing program.Many of these programs bypass the filter that is stopping you fromaccessing Myspace.com. Installing and using these programs may get youin serious trouble with your school or employer.
Browse with Ace VPN
Ace VPNoffers both free and premium vpn service. Paid VPN costs $5 per month.This seems to bypass even websense. They are based on openvpn and canbe run on Windows, Linux, Mac and even on routers running DD-WRT orTomato firmware. They have gateway servers in US and EU.- Visit Ace VPN for account registration and installation instructions.
Browse using UltraSurf or JonDo (http:// download.cnet.com/JAP-JonDo/3000-2144_4-167235.html)
Both use self invented GIFT system with a high encryption standard(Claims to be higher than financial transaction security standards)- Click on the link.
- Download the Ultrasurf 9 client software (in zipped or exe format) or JonDo in exe format.
- Unzip the software using either WinAce, Winzip or WinRAR.
- Ultrasurf and JonDo are green software and don't require installation. Simply execute U[version].exe example: U86.exe, U87.exe or JonDo.exe
- The software will tryto connect to proxy servers and will open a default web page in yourdefault browser upon successful connection.
- The software will work on any installed browsers.
- If you can't download it from school, put the executable on a flash drive at home and run it off there.
Browse with a "Portable" Browser
This one works if the school uses a special browser with therestrictions built into it, or third-party software to restrict commonbrowsers such as Internet Explorer on Windows, or Safari on MacOS.- Visit mozilla.com or the site of another browser such as Opera.
- Search for a portable version of the browser. This should be a download with a "pre-installed" copy of the browser, using regular files to store settings.
- Run the portable version and enjoy.
- Set an http proxy in the portable browser if needed. Visit Proxy list for daily updated proxies.
Browse with remote access
- Leave a computer always on at home (and connected to the internet). Turn on remote access.
- On the school computer go to Start - Accessories - Remote Desktop Connection.Put in your IP address (or sign up your computer at home for dyndns.orgto get a name for it if your address changes all the time). You canconnect to your home computer, and do anything you want from there.
- You can also use a VNC service.
Browse with text editors
If the school has blocked the download of portable browsers, you canalways open the website in a text editor(e.g. Notepad.exe) and save itas a HTML file and open it later with a proper internet browser(e.g. IEor FF).- Open notepad. Start menu - programs - accessories - notepad OR %SystemRoot%system32notepad.exe
- File - Open and in the "File Name" field, enter the IP address of the website you'd like to visit WITH the http:// or https:// prefixes. (See above for procedure to attain IPs.)
- File - Save As and save the file as an .htmlfile. Open it in MS WORD as a HTML Webpage. (you can directly downloadthe file with MS WORD but some schools block MS OFFICE from all networkaccess as PowerPoint used to be able to browse folders the user was notauthorized to access as it ran in Shell 0 instead of Shell 1.)
Thanks...
Friday, December 17, 2010
How to crack Linux password (short n easy way)?
Q. Can you tell me more about unshadow and john command line tools? How does it protect my server from crackers?
<This question is asked from [inspiredhacker@gmail.com], so here is the way to that>
A. Both unshadow and johndistributed with - John the Ripper security software or fast passwordcracker software. It is free and Open Source software. It runs onWindows, UNIX and Linux operating system. Use this tool to find out weak users passwords on your own server.
John cracking modes
John can work in the following modes:[a] Wordlist: John will simply use a file with a list of words that will be checkedagainst the passwords. See RULES for the format of wordlist files.
[b] Single crack : In this mode, john will try to crack the password using the login/GECOS information as passwords.
[c] Incremental : This is the most powerful mode.John will try any character combination to resolve the password.Details about these modes can be found in the MODES file in john’sdocumentation, including how to define your own cracking methods.
Install John the Ripper Password Cracking Tool
John the ripper is not installed by default. If you are using Debian / Ubuntu Linux, enter:$ sudo apt-get install john# rpm -ivh john*How do I use John the ripper to check weak passwords / crack passwords?
First use the unshadow command to combines the /etc/passwd and /etc/shadowfiles so John can use them. You might need this since if you only usedyour shadow file, the GECOS information wouldn’t be used by the "singlecrack" mode, and also you wouldn’t be able to use the -shells option.On a normal system you’ll need to run unshadow as root to be able toread the shadow file. So login as root or use old good sudo / sucommand under Debian / Ubuntu Linux:RHEL / CentOS / Fedora Linux user type the following command:$ sudo /usr/sbin/unshadow /etc/passwd /etc/shadow > /tmp/crack.password.db
To check weak password (crack password), enter the following command:# /usr/bin/unshadow /etc/passwd /etc/shadow > /tmp/crack.password.db
WARNING! These examples uses brute-force ~ CPU-time consuming password cracking techniques.To use John, you just need to supply it a password file createdusing unshadow command along with desired options. If no mode isspecified, john will try "single" first, then "wordlist" and finally"incremental" password cracking methods.
$ john /tmp/crack.password.dbjohn /tmp/crack.password.db
Loaded 1 password (FreeBSD MD5 [32/32])Above output clearly indicates - user test has 123456 and didi has abc123 password.$ john -show /tmp/crack.password.dbtest:123456:1002:1002:test,,,:/home/test:/bin/bash
didi:abc123:1003:1003::/home/didi:/usr/bin/rssh
2 passwords cracked, 1 left
Wednesday, November 17, 2010
How to gain root from a SUID script or program?
Hi friends, this post is totally dedicated to Unix/Linux (all Linux distributions like OpenSUSE/Ubuntu/Fedora/RHEL etc.) users for gainning access as a root in Linux machine via a SQUID SCRIPT/Program.
Check it....
- Change IFS.
If the program calls any otherprograms using the system() function call, you may be able to fool it bychanging IFS.
IFS is the Internal Field Separator that the shell uses todelimit arguments.
If the program contains a line thatlooks like this:
system("/bin/date")
and you change IFS to '/' the shellwill them interpret the proceeding line as:
bin date
Now, if you have a program of yourown in the path called "bin" the suid program will run your programinstead of /bin/date.
To change IFS, use this command:
- Link the script to -i
Create a symbolic link named"-i" to the program. Running "-i" will cause theinterpreter shell (/bin/sh) to start up in interactive mode. This only works onsuid shell scripts.
Example:
% ln suid.sh -i%-i#
- Exploit a race condition
Replace a symbolic link to theprogram with another program while the kernel is loading /bin/sh.
Example:
nice -19 suidprog ; ln -s evilprogsuidroot
- Send bad input to the program.
Invoke the name of the program and aseparate command on the same command line.
Example:
suidprog ; id
Ok, this post may be useful for you, thanks...
Subscribe to:
Posts (Atom)
