Kindle 3 root shell
- Serial console
Obtaining password hash
- Boot the machine and login with default user. No password is required.
- cat /etc/shadow
- framework user's password is mario
- root password need to be figured out (it's per-device).
Getting root password
- Install john package
- Run the following script:
for i in $(seq 0 4095); do printf 'fiona%03x\n' $i; done | john -stdin shadow
Another way to obtain root password
echo fiona$(echo B00XXXXXXXXXXXXX | md5sum | cut -b 8-10)
B00XXXXXXXXXXXXX is the Kindle's serial number