Home / server / Questions / 516942
Accepted
Toqeer
Asked: 2013-06-20 05:00:56 +0800 CST

Saved Kitty Password Extraction

  • 772

I am having a ubuntu server and forgot the root password. I could not find the pass in any documentation (My fault). Now I have another user which is in the sudo list but the password of that user is saved in kitty which I also dont remember, I can login with that but when I login and execute some admin commands with sudo its needs the password for that user which I can not see it. The question is how I can see that kitty password which is saved in hidden characters??

linux

2 Answers

  1. To recover your password, saved in KiTTY follow this simple steps:

    1. Load the session with the stored password into KiTTY
    2. Go to the Session -> Options
    3. Enable logging for SSH packets and raw data
    4. Uncheck the Omit known passwords fields box
    5. Start the session, wait until it logs you in
    6. Close the KiTTY window
    7. Go to your KiTTY folder and open the log file
    8. Find the "Send automatic password" block to get your plain-text password.

    It will look like this, where "YourPassword" in the password stored in KiTTY:

    Event Log: Send automatic password
Outgoing packet #0x7, type 50 / 0x32 (SSH2_MSG_USERAUTH_REQUEST)
  00000000  00 00 00 04 72 6f 6f 74 00 00 00 0e 73 73 68 2d  ....root....ssh-
  00000010  63 6f 6e 6e 65 63 74 69 6f 6e 00 00 00 08 70 61  connection....pa
  00000020  73 73 77 6f 72 64 00 00 00 00 0c 59 6F 75 72 50  ssword.....YourP
  00000030  61 73 73 77 6F 72 64                             assword
    • 20
  2. Best Answer

    It's encrypted, so you can't.

    However, you can reset the root password by booting into single-user mode. In GRUB add the word single to the end of the boot command and it'll allow you to set the root password.

    If it's a remote server, that's definitely more difficult as single-user mode = no network access. You'd need to get a console somehow.

    EDIT: Since it's an amazon instance you could attach the EBS volume to a different instance and modify the passwd file manually.

    • 0