I have fixed myself, feel free to critique my steps:
1.) Rebooted with BT live cd
2.) Logged into Live cd with default root/toor
3.) mkdir /tmp2
4.) mount -t ext3 /dev/sda1 /tmp2
5.) cd /tmp2, cd /etc
6.) cp ./shadow ./shadow.bak
7.) sudo nano shadow (maybe the sudo is superflous?)
8.) erased root password hash, ctrl+o to save, enter for default filename "shadow"
9.) rebooted without cd room
10.) logged into bt with "root" no password.
I guess I could've dumped the hash and ran john on it? I guess even a blind squirrel finds a nut every now and again.



