Comments (4)
I haven't really written a howto, but if you download one of the versions of Ubuntu that inception currently supports, you can search for the signature in the libpam
module if you load it into IDA, for instance.
The signatures are at line 398 here:
https://github.com/carmaa/inception/blob/master/inception/modules/unlock.py
From there it should be pretty clear what function and code structure you need to look for in newer versions of Ubuntu.
from inception.
And to add: Pull requests with new signatures are most welcome!
from inception.
@JelteF Check out this issue: #109, it might help you to figure out how to find new patterns for Ubuntu.
from inception.
I found the offset (0x648) for Ubuntu 14.04 x64 but was unable to successfully bypass the login screen. It just flashes once and restarts the login screen. However, after patching I noticed that it did allow me to escalate to root using 'sudo su -' with an incorrect password so it was at least partially successful. The pam_authenticate function looks very similar between 14.04 libpam.so and 13.10 libpam.so so it's probably not an issue there. Could it be LightDM getting in the way somehow?
from inception.
Related Issues (20)
- Why win 8.1 Unlock lock screen is Yes? HOT 1
- I/O errors accessing low memory regions
- Dump module - Add support for partial memory dump on systems with > 3Gb of RAM
- Signature for Windows 10 Enterprise x64 (Version 1511 OS Build 10586.71) HOT 2
- Inception can't find signature for Windows 7 Enterprise SP1 (6.1.7601.23418) HOT 23
- New unlock offset for Windows 7 SP1 x64 Enterprise (msv1_0.dll 6.1.7601.19160) HOT 5
- incept implant error "'list' object has no attribute 'length'"
- Win 10 Support HOT 1
- BSOD on Win7 Enterprise x64 HOT 2
- Doesn't work for Kali with Thunderbolt cable? HOT 3
- Lower 4GB of RAM on the victim. HOT 1
- Is it possible to use some sort of Firewire over USB with this? HOT 1
- Twitter @breaknenter dead? HOT 1
- Can this working on M.2 or mini PCI-e HOT 1
- read more than 4G? HOT 2
- Running incept with any module gives generic error. HOT 1
- any tool same as inception? HOT 2
- firewire modules are not loaded. HOT 1
- Can this rep bypass DMA protection? HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from inception.