How TO: Break into the system

[Mike Smith_33]

Can someone direct me to the documention on how to break into an Hp-UX 11i system (with physical system access). I have searched the forums and the technical documentation with no sucess at this point.

Thanks in advance!

[Patrick Wallek]

And you want to know this because.......?

If you can describe your real problem, we can probably offer a solution. But just asking how to break into a system will probably not garner many answers.

How do we know you are not a hacke/cracker/whatever trying to mess with someone?

[Steven E. Protter]

Shalom Mike,

HP has a course on HP-UX security where they teach these skills as a means of defense.

I for one will post nothing to assist you not that I don't trust you. I don't trust others that will read this in the future.

SEP

[DCE · Accepted solution]

Are you looking for the ability to reset root? or ways to hack the system?

If it is the first, reboot the system, interupt the boot cycle during the 10 second window where it says press any key, issue the command bo pri, answer yes to interact with ISL, and enter hpux -is at the ISL prompt, and press enter. This will bring you up in single user mode, and give you the ability to reset roots password.

[Mike Smith_33]

Please notice that I requested this as someone already having physical access to the box itself. If I already have physical access I think your degree of concern should decrease. I am not looking for general breakin information, specifically, someone having physical access.

Anyway, I just wanted to save a call to tech support and figured you guys would be faster. I am attempting to document how my boss or someone else could get in the system in case I got hit by a bus as I am the only one with the root password.

[Mike Smith_33]

Thanks DCE, we are getting ready to go test this. I have broken in to VMS and Tru64 with physical access but I was not sure of the exact steps for hp-ux.

Thanks all!

[Jaime Bolanos Rojas.]

:-) :-) :-)

Mike, it all depents on what you want to do, but I notive you have ask plenty of questions in the forums, probably you are not a cracker but who knows...

If you forgot your root password, you can get into single user mode and change the password overthere, and you will have access to it, that's the fast and easy way with physical access to the server.

Notice: **** whatever is advice overhere is to fix machines and not to break anything in them, even thought some manage to do it all the time without fault****

Regards,

Jaime.

[Torsten.]

Why not write the password down, put in into an envelope and seal it. Now put it into the safe. This is as secure as your money is.

[A. Clay Stephenson]

Since, you have physical access, presumably you are allowed into the protected area where the console is housed. The exact process varies a bit depending upon the model and irmware level but the procedure is similar.

1) Crash the box (yank the power cord or equivalent).
2) Power the box back up, and interrupt the boot process when the console directs you to by hitting .
3) boot pri
4) Interact with ISL/IPL? Y
5) hpux -is

This will bring the box up in single-user mode and you will be logged in as root. You can mount any needed filesystems (which may first require an fsck because of the harsh manner in which the box was last shutdown) and do any needed maintenance. You can also set the root password at this time. You then shutdown and allow the box to boot normally.

You can also peruse the security bulletins for possible techniques but hopefully the legitimate and diligent sysadmin will have already applied the fixes to close those holes.

[Steven E. Protter]

I think there was a misunderstaning due to your choice of subject.

This topic has in actuality come up many times with people providing a more appropriate title and enough detail to make their attentions clear.

Single user mode can be password protected. In that case you cand still boot off Core OS mount the root filesystem and null out the root password entry in /etc/passwd.

Please accept my apologies for my part in the misunderstanding. For some reason I'm a bit tense lately, Can't figure out why.

Good luck resolving your issue.

Steven