Mac OSXRooting

[View the .TXT here]

Get Root Admin access on a Mac OS X Computer in 4 simple steps:

Introduction - This is an article I tried to keep as short and simple as possible, if you have any critique, send it to Lockdown.Xax@gmail.com. Please keep in mind, I do not actually own a Mac OS X computer. This information that I am relaying was discovered while attending a local HackBloc meeting where an iMac running OS X was donated to the HackBloc, but no one had any idea how to takeover the machine. Flatline, Alex, and I spent about 20 minutes experimenting, and eventually we found a way to go about it. I'm writing down now all the steps I remember doing that are critical to taking over a Mac.

Step 1 - Boot into single user mode. Simply put: Reboot the computer and hold down on "s" and the command key (often the apple key, but if you don't have an Apple Keyboard, the "Windows" key will do). What you should see is yourself booting into Unix. (Z shell, but that can be changed if you are more comfortable with C or Bash) Also note, many Unix commands are completely disabled in all shells by Mac, including useradd/adduser.

Step 2 - Run a File System Check (Apparently the proper command was "/sbin/fsck -y", but I believe a simple "fsck -f" should work just as well), mount every file using the command "mount -uw /", and finally, run Mac's famous "System Starter" using "/sbin/SystemStarter". Basically, you're restarting the entire OS without deleting anything. Note, I believe not all OS X computers have SystemStarter, in fact I'm almost positive most of the newer ones do not. If your Mac does not have system starter, this may not work.

Step 3 - You now basically have root access on the Shell. To get root OUTSIDE the shell, you need to create an account using "passwd root", which will allow you to change the password of the root account (it will ask you to type in the new password). You can change the password of other accounts if you like by using the "passwd (username here)" command.

Step 4 - Reboot and log in

ENDZ

-Lockdown