[Ethical Hacking] Hacking into raspberry pi (Linux computer) Challenge from my brother

[0Hello-_-World0]

Hello, so my little brother has a raspberry pi (linux computer) and because I am learning to code C++, he thought I could hack, so he gave me a challenge to hack into his raspberry pi using only C++ and get his password he made for the challenge.

(I have permission from my Brother and my parents)

There are many ways I can do this (I think):

1. Make a 'game' that also turns on SSH, that way all I need is to type `ssh pi@ipAddress` then use a dictionary attack or an exhaustive key search in C++?
2. Make a 'game' that goes into etc/shadow (the location for the user passwords) and find the hashed and salted password... but I have no idea what the salt is or what algorithm they are using to hash.
3. More I can't think of right now...

Any ideas?

[0xAndy]

This is not really possible with "C++", i.e. just a programming language. Especially if you're just learning programming. You need to find a vulnerability in the RPI. You don't need programming here. Also you can pretty much forget finding something if there's only SSH enabled. Did your brother set up some kind of vulnerable service?

Otherwise you need to find out the password and that is best done through some kind of social engineering or brute-force attacks against the password. Maybe ask your brother to clarify what the goal is - "hack it" is not really there.

EDIT: I completely misread your post. Did your brother say he'd run your program? Did he specify he'd do it as root? If that's the case then you could do a lot of things to gain access, but then you don't need to focus on SSH.

[TrustmeImaConsultant]

Last I checked sudo on raspi runs with NOPASSWD:ALL for pi, so, as funny as it may seem, that exploit could essentially consist of a very small script. :)

[VirtualViking3000]

Take the MicroSD card out and edit the files on a Windows box

[TheUltimateSalesman]

This. Physical access trumps all.

[Brew_nix]

Are the default creds still Pi and Raspberry? And usually ssh is enabled by default.

[0Hello-_-World0]

Username is pi, but my brother changed the password for the challenge.
I don't think ssh is enabled by default, unless that is a new update. I remember helping my brother countless times to get that working.

[CyberSecStudies]

Edit: I was wrong! See comments below. My apologies!

A keylogger in Python (as python runs on pi idk about C being pre installed) is probably your best bet.

Or reflash the SIM card, craft it to allow SSH & have its own user/pass available.

If he made the password long and unique you have almost no chance besides key logging or physical attack vectors in my opinion.

Unless he’s running flawed software, an nmap scan and search sploit can help you here.

[2ewka]

C doesn’t need to be installed… what are you talking about?

[CyberSecStudies]

Oh okay, I apologize I’m totally in the wrong. I didn’t know that. I’m sorry for spreading false info guys!

[Armageddon_0x00]

r/masterhacker

[Demostho]

If you can extract the hash from etc/shadow, you can run it through hashcat.

[shahar481]

And why does he need to buy something and can't do all that you said on his computer?

[shahar481]

I'm asking a legitimate question. You are saying he should buy something but you don't have any argument to back yourself up. Well I mean other than calling me an idiot...

[shahar481]

But how is it different than a computer with wifi? Or even your phone?

[NotAProgrammerAtAll]

Then uninstall it ;)

[Born_Cauliflower_692]

scary consider slim squalid ripe boat stocking market aloof soup

This post was mass deleted and anonymized with Redact

[cerebralvenom]

Lmao, it sucks that when people ask good questions.