Register Guidelines E-Books Search Today's Posts Mark Forums Read

Go Back   MobileRead Forums > E-Book Readers > Amazon Kindle > Kindle Developer's Corner

Notices

Reply
 
Thread Tools Search this Thread
Old 12-10-2011, 11:11 AM   #1
geekmaster
Всё гениальное просто.
geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.
 
geekmaster's Avatar
 
Posts: 5,070
Karma: 6789001
Join Date: Nov 2011
Location: Щедрость не имеет пределов.
Device: *.*
fiona root password wordlist

Quote:
Originally Posted by seaniko7
Hi,

I've seen on irc that you have wordlist for cracking fiona**** password in Kindle.

Would you mind sharing it ?

Cheers
Sure. You can download the list below in either tar.gz or zip file format.

This list contains all possible fiona*** and fiona**** passwords. For some reason, most posts on mobileread say that they need four hex digits after fiona, but on all five of my kindles, I only need three hex digits, so I included both types in this wordlist.

Why:
Spoiler:
Although you can get the fiona password by cutting three or four hex digits from the md5sum of your kindle serial number, I created this list so I could use John the Ripper to quickly verify the md5sum password with what was encrypted in the /etc/shadow file. I copied my kindle /etc/passwd and /etc/shadow to my linux PC, used the John "shadow" command to combine them, and then used my wordlist to crack the root password. John said it found my root password in 0.00 seconds. That is "infinitely" faster than using a brute-force crack (for math-heads: division by numbers approaching zero yields a quotient approaching infinity.) .

How:
Spoiler:
You can create your own fiona wordlist with a simplistic (but tedious) linux command. I know that there are better ways to do this, but my bash skills are rusty and this way got the job done without needing to RTFM.
I used copy/paste to minimize typing. Here is my one-line (3 hex digit) fiona wordlist generator:
for i in 0 1 2 3 4 5 6 7 8 9 a b c d e f; do for j in 0 1 2 3 4 5 6 7 8 9 a b c d e f; do for k in 0 1 2 3 4 5 6 7 8 9 a b c d e f; do echo fiona$i$j$k >> fiona_wordlist; done; done; done
and then I did that again after inserting another copy of the loop before the echo using a new loop var and adding that var onto the fiona password.

Using this wordlist, John the Ripper reported that my root password had three hex digits after fiona.

Also, as reported in the IRC channel, some kindles use mario for a root password (in diagnostic mode).

Please use this wordlist for honorable purposes. Thanks.

UPDATE: All default root passwords 8 characters or less, such as fionaXXX (3 hex digits). The are DES-hashed so they are truncated to 8 characters. Any new password created with "passwd" is MD5-hashed and uses all characters.
Attached Files
File Type: gz fiona_wordlist.tar.gz (143.9 KB, 271 views)
File Type: zip fiona_wordlist.zip (80.9 KB, 505 views)

Last edited by geekmaster; 02-13-2012 at 05:05 PM.
geekmaster is offline   Reply With Quote
Old 12-10-2011, 04:30 PM   #2
ryran
Connoisseur
ryran plays well with othersryran plays well with othersryran plays well with othersryran plays well with othersryran plays well with othersryran plays well with othersryran plays well with othersryran plays well with othersryran plays well with othersryran plays well with othersryran plays well with others
 
Posts: 79
Karma: 2718
Join Date: Aug 2011
Device: Kindle 3G
Slightly OT: I know you probably don't really care, but who knows--it might come in handy some day, so.... for future ref, BASH can do number & character generation via curly-bracket statements, e.g., you can replace the numbers & letters in each of your for loops with {0..9} {a..f}.

(PS: Number generation has been around for a while, but character-generation might have been added in bashV4.)
ryran is offline   Reply With Quote
 
Advertisement
Old 12-10-2011, 05:16 PM   #3
NiLuJe
BLAM!
NiLuJe ought to be getting tired of karma fortunes by now.NiLuJe ought to be getting tired of karma fortunes by now.NiLuJe ought to be getting tired of karma fortunes by now.NiLuJe ought to be getting tired of karma fortunes by now.NiLuJe ought to be getting tired of karma fortunes by now.NiLuJe ought to be getting tired of karma fortunes by now.NiLuJe ought to be getting tired of karma fortunes by now.NiLuJe ought to be getting tired of karma fortunes by now.NiLuJe ought to be getting tired of karma fortunes by now.NiLuJe ought to be getting tired of karma fortunes by now.NiLuJe ought to be getting tired of karma fortunes by now.
 
NiLuJe's Avatar
 
Posts: 5,256
Karma: 5189261
Join Date: Jun 2010
Location: Paris, France
Device: Kindle 2i, 3g, 4, 5w, PW & PW2; Kobo H2O
Yup, it's a bash vsomething feature. (And isn't supported on the Kindle's version of busybox, which is built without bash compatiblity, at least on K2/K3, where we can instead use seq for number generation, at the expense of a fork).
NiLuJe is offline   Reply With Quote
Old 12-10-2011, 06:37 PM   #4
geekmaster
Всё гениальное просто.
geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.
 
geekmaster's Avatar
 
Posts: 5,070
Karma: 6789001
Join Date: Nov 2011
Location: Щедрость не имеет пределов.
Device: *.*
Thanks for the pointers. I was just in a hurry and chose not to RTFM at that moment in time, and my memory for details like that just "ain't what it used to be".

Okay, I am an old-timer in this industry.

In the REALLY olden days, disk drives* were the size of a laundromat washing machine, and their removable multi-platter disk packs* held what at the time was considered a staggering amount of storage (an entire 512 Kbytes -- yes, that's right, a 10 kilogram removable disk pack held 0.0000005 terabytes). They were so expensive that they were used only for really important random access data (and temporary "scratch" files, sort of like virtual memory). Most data was stored on punch cards, with the more valuable stuff on spools of 7-track or 9-track magnetic tape, with data bits so large you could see them with the naked eye by sprinkling powdered iron on them. I had my own personal keypunch machine in my basement, and my own ASR-33 teletype (with paper tape punch) in my living room.

When I was doing the quick-and-dirty one-liner above, it was just a "one off" script, and after trying square brackets with the ".." did not work, I just brute-forced it with a hex digit list. That actually made sense, because it was faster to type 16 hex digits and copy/paste it than it would have been to look up the correct syntax. I was tempted to clean it up before publication above, but I decided to show that doing things the "hard" way is sometimes faster than doing it the "right" way, and getting it done quickly in a way that works is what really matters, rather than trying to earn "style points"...

There is a nice "Unix Rosetta Stone" that has been around for decades, that I kept posted on the wall near my desk: http://bhami.com/rosetta.html

There are *always* better ways to be found given enough time, but sometimes "good enough now" is better than "more better later".

* ADDENDUM:
Disk packs were about the size of a small car tire. Here is a photo of one:And here is a photo of a disk drive that used them (hint: the buttons on the front are about 1 inch by 1 inch):

Last edited by geekmaster; 03-13-2013 at 09:31 PM.
geekmaster is offline   Reply With Quote
Old 12-11-2011, 11:13 AM   #5
ryran
Connoisseur
ryran plays well with othersryran plays well with othersryran plays well with othersryran plays well with othersryran plays well with othersryran plays well with othersryran plays well with othersryran plays well with othersryran plays well with othersryran plays well with othersryran plays well with others
 
Posts: 79
Karma: 2718
Join Date: Aug 2011
Device: Kindle 3G
@geekmaster:
I'm always game to hear first-hand accounts of the days before I was using computers, but for the record.. to be absolutely clear, I wasn't in any way trying to: one-up you / criticize you / get style points / make it seem like I knew more than you. I heard you when you said you just didn't feel like looking it up, but it was simple for me to share (aside from python, which I'm learning, BASH is my only programming expertise).

Re the apple-2/3 story: That is wild. I know Apple HAS played and will continue to play an important role in terms of development/innovation of computers, but ... bleh, none of their products have ever really sat right with me. I'm sure glad we have choices.
ryran is offline   Reply With Quote
Old 12-11-2011, 11:30 AM   #6
DustyDisks
Want sum bacon?
DustyDisks ought to be getting tired of karma fortunes by now.DustyDisks ought to be getting tired of karma fortunes by now.DustyDisks ought to be getting tired of karma fortunes by now.DustyDisks ought to be getting tired of karma fortunes by now.DustyDisks ought to be getting tired of karma fortunes by now.DustyDisks ought to be getting tired of karma fortunes by now.DustyDisks ought to be getting tired of karma fortunes by now.DustyDisks ought to be getting tired of karma fortunes by now.DustyDisks ought to be getting tired of karma fortunes by now.DustyDisks ought to be getting tired of karma fortunes by now.DustyDisks ought to be getting tired of karma fortunes by now.
 
DustyDisks's Avatar
 
Posts: 488
Karma: 1596586
Join Date: Jan 2011
Location: Gladewater, Texas
Device: K3+3g/KFHD 7"/Nexus 7/Nexus 7.2
Quote:
Originally Posted by geekmaster View Post
Thanks for the pointers. I was just in a hurry and chose not to RTFM at that moment in time, and my memory for details like that just "ain't what it used to be".

Okay, I am an old-timer in this industry. I have been a computer programmer for about 45 years now.

Getting close myself to be able to carry the title, "One Day Older Than Dirt!). I have played with and used some of the equipment in your post. That was the days that "Floppy" disks were really floppy.

Peace !



Edit: May well someday swap war story's!

Last edited by DustyDisks; 12-11-2011 at 12:06 PM.
DustyDisks is online now   Reply With Quote
Old 12-11-2011, 11:39 AM   #7
geekmaster
Всё гениальное просто.
geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.
 
geekmaster's Avatar
 
Posts: 5,070
Karma: 6789001
Join Date: Nov 2011
Location: Щедрость не имеет пределов.
Device: *.*
Quote:
Originally Posted by ryran View Post
... for the record.. to be absolutely clear, I wasn't in any way trying to: one-up you / criticize you / get style points / make it seem like I knew more than you...
I took no offsense from your comment, and that's why I started with "Thanks for the pointers." I realize that inserting a comment like that into a thread is to add a tip or clarification to assist other readers following the thread, and I do it myself.

Your feedback is appreciated. I just felt like since I started this thread, it was okay to do a little mental coredump, rather than intruding on somebody else's thread.

Perhaps we need a "War Stories" thread? I am sure others have interesting stories to tell as well...
geekmaster is offline   Reply With Quote
Old 12-11-2011, 11:42 AM   #8
geekmaster
Всё гениальное просто.
geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.geekmaster ought to be getting tired of karma fortunes by now.
 
geekmaster's Avatar
 
Posts: 5,070
Karma: 6789001
Join Date: Nov 2011
Location: Щедрость не имеет пределов.
Device: *.*
Quote:
Originally Posted by DustyDisks View Post
Getting close myself to be able to carry the title, "One Day Older Than Dirt!). I have played with and used some of the equipment in your post. That was the days that "Floppy" disks were really floppy.

Peace !

No need to quote my *entire* post. It is usually sufficient to only quote the part relevant to your added comments. EDIT: I see that you shortened it. That makes the thread easier to follow (especially on portable devices). Thanks.

Feel free to add some of your old-timer experience to this "variable topic" thread, for the enlightenment of anybody who stumbles upon it. Humorous anecdotes usually help keep the reader interested.

Personally, I am still waiting for my computer implant with direct neural interface*. One of these days...

EDIT: *Of course, a direct neural interface should include at least one channel of DMA (Direct Memory Access). A tool like fsck.brain would be nice too, for us old-timers!

Last edited by geekmaster; 12-25-2011 at 12:08 AM.
geekmaster is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
How to recover my Kindle root password? recoco Kindle Developer's Corner 11 09-12-2012 05:29 PM
Issues changing root password tstngry Amazon Kindle 0 04-27-2012 12:39 AM
password req to root the edge littleal enTourage eDGe 3 06-27-2011 02:34 AM
iLiad dropbear ssh: how to change root password? daudi iRex Developer's Corner 2 01-10-2008 05:49 PM
iLiad Thoughts on 2.5 and root password TadW iRex Developer's Corner 16 07-26-2006 04:37 AM


All times are GMT -4. The time now is 09:33 PM.


MobileRead.com is a privately owned, operated and funded community.