Cracking Linux Hashes and Expanding Access
Initial Entry Point During a routine exploration of vulnerable servers on the internet, I successfully gained root access to several machines. While the specific method used to achieve root access is beyond the scope of this blog, I’ll focus on how I expanded my access to other servers within the same organization. Extracting Linux User Hashes Once inside the compromised machine, I noticed multiple user accounts. With root privileges, I accessed the /etc/shadow file, which stores password hashes for all users on the system. I copied the contents of the shadow file to my local machine and extracted the hashes using the following command: ...