As some may know, i played with Shellcode yesterday and got my home folder removed. The shellcodes also mailed away some of my files, because of permission denied it couldn't mail both of the files that were "stolen".
So now i am wondering, are these two folders important? what do they do?
/etc/passwd (mailed, thought it had passwords in it....didn't seem like it)
/etc/shadow (permission denied, not mailed)
oh, i read about it now....lucky me i am changing passwords soon anyway...
Ok so here is the stuff i read about...
http://www.cyberciti.biz/faq/understand ... le-format/
So ....it was more important then i thought...
Now my NEW QUESTION is, is it possible that the shadow file was mailed even if it's read only ?
[Question] Are these important?
[Question] Are these important?
"The best place to hide a tree, is in a forest"
Re: [Question] Are these important?
Read protected, you mean? No, that's not possible.cats wrote:Now my NEW QUESTION is, is it possible that the shadow file was mailed even if it's read only ?
Re: [Question] Are these important?
G-Brain wrote:Read protected, you mean?cats wrote:Now my NEW QUESTION is, is it possible that the shadow file was mailed even if it's read only ?
Yes, that is what i meant
"The best place to hide a tree, is in a forest"
- bad_brain
- Site Owner
- Posts: 11636
- Joined: 06 Apr 2005, 16:00
- 19
- Location: In your eye floaters.
- Contact:
btw, while I was reading a Linux mag in bed yesterday I stumbled over an article about file recovery...you CAN restore your files:
http://www.cgsecurity.org/wiki/PhotoRec
works for ext3 too....only the file names will not be recovered because those got lost with the rm command. don't worry about the "photo" in the name, it supports more than 100 file formats...
http://www.cgsecurity.org/wiki/PhotoRec
works for ext3 too....only the file names will not be recovered because those got lost with the rm command. don't worry about the "photo" in the name, it supports more than 100 file formats...