huntergregal / mimipenguin

A tool to dump the login password from the current linux user
Other
3.79k stars 631 forks source link

Add support for LightDM #35

Closed bcoles closed 6 years ago

bcoles commented 6 years ago

Add support for LightDM.

Tested on Ubuntu 14.04.1 LTS and 16.04.4 LTS.

Based on this exploit.

Which is based on the original report and PoC by Sven Blumenstein.

Output

Ubuntu 14.04.1 LTS

# ./mimipenguin.sh 
MimiPenguin Results:
[SYSTEM - GNOME]            test:secretpw
[SYSTEM - GNOME]            user:password
[SYSTEM - LIGHTDM]          test:secretpw 
[SYSTEM - LIGHTDM]          user:password 

Ubuntu 16.04.4 LTS

# ./mimipenguin.sh 
MimiPenguin Results:
[SYSTEM - LIGHTDM]          test:secretpw 
[SYSTEM - LIGHTDM]          user:password