huntergregal / mimipenguin

A tool to dump the login password from the current linux user
Other
3.79k stars 631 forks source link

Not working on CentOS release 6.7 #20

Open xiaomotec opened 7 years ago

xiaomotec commented 7 years ago

I use it on Centos release 6.7, and the server is VPS.

Process like this:

[root@OpenVZVPS-2016815796 mimipenguin]# cat /etc/issue CentOS release 6.7 (Final) Kernel \r on an \m

then i execute ./mimipenguin.sh,but without any results. [root@OpenVZVPS-2016815796 mimipenguin]# ls LICENSE README.md mimipenguin.py mimipenguin.sh [root@OpenVZVPS-2016815796 mimipenguin]# ./mimipenguin.sh MimiPenguin Results:

So I can't get user's login password.

huntergregal commented 7 years ago

Hi, thank you for reporting issues to us. Tip: If you're reporting a bug, remove the feature request section for your convenience.

Bug report

Write a description

Information

Target OS info

Current behavior

Write the current behavior and/or screenshot

Expected behavior

Write the expected behavior and/or screenshot

Feature request

Write a description

Information

Target OS info

Expected behavior

Write the expected behavior and/or screenshot

Reproduce Steps

if you know how to do it, please explain the steps. This would help use to speed up adding this feature

toine7m commented 7 years ago

Same with CentOS 7

ps aux | grep -e "gnome-keyring" -e gdm

root 13040 0.0 0.0 475500 1208 ? Ssl mars15 0:00 /usr/sbin/gdm root 13097 0.0 0.6 213140 12524 tty1 Ss+ mars15 0:28 /usr/bin/Xorg :0 -background none -noreset -audit 4 -verbose -auth /run/gdm/auth-for-gdm-cPaN3H/database -seat seat0 -nolisten tcp vt1 root 19556 0.0 0.1 373012 2872 ? Sl avril09 0:02 gdm-session-worker [pam/gdm-password] zabbix 19568 0.0 5.9 387796 112904 ? Sl avril09 0:00 /usr/bin/gnome-keyring-daemon --daemonize --login root 21960 0.0 0.0 112652 980 pts/0 R+ 10:04 0:00 grep --color=auto -e gnome-keyring -e gdm

bcoles commented 6 years ago

For what it's worth, works for me on CentOS 7 (x64), but does not work on CentOS 6.5 (x64).

CentOS 7 - success

[root@localhost mimipenguin]# ./mimipenguin.sh 
MimiPenguin Results:
[SYSTEM - GNOME]            user:password
[root@localhost mimipenguin]# cat /etc/os-release 
NAME="CentOS Linux"
VERSION="7 (Core)"
ID="centos"
ID_LIKE="rhel fedora"
VERSION_ID="7"
PRETTY_NAME="CentOS Linux 7 (Core)"
ANSI_COLOR="0;31"
CPE_NAME="cpe:/o:centos:centos:7"
HOME_URL="https://www.centos.org/"
BUG_REPORT_URL="https://bugs.centos.org/"

CENTOS_MANTISBT_PROJECT="CentOS-7"
CENTOS_MANTISBT_PROJECT_VERSION="7"
REDHAT_SUPPORT_PRODUCT="centos"
REDHAT_SUPPORT_PRODUCT_VERSION="7"
[root@localhost mimipenguin]# ps aux | grep -e "gnome-keyring" -e gdm
root        987  0.0  0.1 480248  1636 ?        Ssl  01:54   0:00 /usr/sbin/gdm
root       1015  0.3  3.1 304788 31420 tty1     Ssl+ 01:54   0:17 /usr/bin/X :0 -background none -noreset -audit 4 -verbose -auth /run/gdm/auth-for-gdm-iAA4q8/database -seat seat0 -nolisten tcp vt1
root       1429  0.0  0.2 528948  2196 ?        Sl   01:56   0:00 gdm-session-worker [pam/gdm-password]
user       1446  0.0  8.3 462496 83000 ?        Sl   01:56   0:00 /usr/bin/gnome-keyring-daemon --daemonize --login
gdm        1451  0.0  0.1 458088  1188 ?        Sl   01:56   0:01 ibus-daemon --xim --panel disable
gdm        1454  0.0  0.1 373560  1104 ?        Sl   01:56   0:00 /usr/libexec/ibus-dconf
gdm        1457  0.0  0.1 438276  1696 ?        Sl   01:56   0:00 /usr/libexec/ibus-x11 --kill-daemon
root      92784  0.0  0.0 112796   984 pts/1    S+   03:15   0:00 grep --color=auto -e gnome-keyring -e gdm

CentOS 6.5 - fail

[root@localhost mimipenguin]# ./mimipenguin.sh 
MimiPenguin Results:
[root@localhost mimipenguin]# cat /etc/redhat-release
CentOS release 6.5 (Final)
[root@localhost mimipenguin]# ps aux | grep -e gnome-keyring -e gdm
root      1636  0.0  0.1 134028  2332 ?        Ssl  Mar11   0:00 /usr/sbin/gdm-binary -nodaemon
root      1678  0.0  0.1 164816  3792 ?        Sl   Mar11   0:00 /usr/libexec/gdm-simple-slave --display-id /org/gnome/DisplayManager/Display1 --force-active-vt
root      1681  0.1  2.0 170592 39888 tty1     Ss+  Mar11   0:13 /usr/bin/Xorg :0 -nr -verbose -audit 4 -auth /var/run/gdm/auth-for-gdm-W64MlS/database -nolisten tcp vt1
gdm       1767  0.0  0.0  20040   824 ?        S    Mar11   0:00 /usr/bin/dbus-launch --exit-with-session
root      1832  0.0  0.1 192132  3340 ?        Sl   Mar11   0:00 pam: gdm-password
user      1842  0.0  0.2 163588  4000 ?        Sl   Mar11   0:00 /usr/bin/gnome-keyring-daemon --daemonize --login
user      2180  0.0  0.6 408784 12624 ?        S    Mar11   0:00 /usr/libexec/gdm-user-switch-applet --oaf-activate-iid=OAFIID:GNOME_FastUserSwitchApplet_Factory --oaf-ior-fd=28
root     23661  0.0  0.0 103272   884 pts/1    S+   00:05   0:00 grep -e gnome-keyring -e gdm
bcoles commented 6 years ago

On CentOS 6.5, it looks like dump_pid in mimipenguin.sh is failing. The output dump file is 0 bytes.

mimipenguin.py fails as Python3 is not installed by default. Python2 is present.

bcoles commented 2 years ago

CentOS 8.1.1911

C and Python version work on CentOS 8.1.1911.

[root@centos-8-1-1911 mimipenguin]# uname -a
Linux centos-8-1-1911.localdomain 4.18.0-147.el8.x86_64 #1 SMP Wed Dec 4 21:51:45 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
[root@centos-8-1-1911 mimipenguin]# cat /etc/centos-release
CentOS Linux release 8.1.1911 (Core) 
[root@centos-8-1-1911 mimipenguin]# ./mimipenguin
[+] Searching: [SYSTEM - GNOME] (gdm-password)
[+] Searching: [SYSTEM - GNOME] (gnome-keyring-daemon)
  [-] user:password
  [-] user:password
  [-] user:password
  [-] user:password
  [-] user:password
  [-] user:password
  [-] user:password
  [-] user:password
[root@centos-8-1-1911 mimipenguin]# ./mimipenguin.sh
MimiPenguin Results:
[root@centos-8-1-1911 mimipenguin]# ./mimipenguin.py
[SYSTEM - GNOME]    user:password