[Question] Are these important?

[ayu]

As some may know, i played with Shellcode yesterday and got my home folder removed. The shellcodes also mailed away some of my files, because of permission denied it couldn't mail both of the files that were "stolen".

So now i am wondering, are these two folders important? what do they do?

/etc/passwd (mailed, thought it had passwords in it....didn't seem like it)

/etc/shadow (permission denied, not mailed)


oh, i read about it now....lucky me i am changing passwords soon anyway...

Ok so here is the stuff i read about...


http://www.cyberciti.biz/faq/understand ... le-format/

So ....it was more important then i thought...

Now my NEW QUESTION is, is it possible that the shadow file was mailed even if it's read only ?

[G-Brain]

Now my NEW QUESTION is, is it possible that the shadow file was mailed even if it's read only ?

Read protected, you mean? No, that's not possible.

[ayu]

Now my NEW QUESTION is, is it possible that the shadow file was mailed even if it's read only ?

Read protected, you mean?

Yes, that is what i meant

[bad_brain]

btw, while I was reading a Linux mag in bed yesterday I stumbled over an article about file recovery...you CAN restore your files:
http://www.cgsecurity.org/wiki/PhotoRec
works for ext3 too....only the file names will not be recovered because those got lost with the rm command. don't worry about the "photo" in the name, it supports more than 100 file formats...

[ayu]

yeah i read about that, didn't know it supported more then images though, thanks!

trying another recovery tool called "foremost" at the moment, gonna wait until it's done

EDIT: naah didn't support the odt format =(