Login into backtrack without password

[thefatmoop]

change pw using passwd in terminal. Ctrl+L to lock the pc

user can come in press ctrl+alt+backspace (reset x-windows) on the locked pc

after some time a backtrack login screen will popup (it's not the terminal but a gui)

user: root
password: *leave it blank*

bam ur into the backtrack system... it's not the locked session... but is still access to a physical system without the password

*if you type in an incorrect password... it will still say "invalid login"


i dunno if backtrack is made to be secure like this... but someone could obviously get into a backtrack system using this.

For this i was using Backtrack 3, and i was running it from ram

[thefatmoop]

i'm sorry it does keep your locked session running and the password is still globally the new pw on the machine... so if the new person logged in without providing a password they can run

passwd : enter a new password...

then they will globally change the password. (they can do this since bt users always have sudo privileges)

when i'm running off a usb stick i can't get multiple sessions going (i was running VNC and SSH server when i was running off of ram)

[thefatmoop]

>.> like is this a bug? i feel like this post is about to get sent to the idiot corner lol

[MrMaX]

you need to configure the kdm login to enable blank passwords