#!/usr/bin/python # uidupe.py - A simple script to check for multiple UID0 users. # by John Martinelli # john@martinelli.com # redlevel security # redlevel.org # September 4, 2006 import string import sys def intruder(user, number): if number == 2: print " " print "[!] EXTRA UID 0 USER FOUND [!] \n" + user def main(): nFoundRoot = realLine = 0 file = open('/etc/passwd', 'r'); sDocument = file.readlines() for nCurLine in sDocument: if string.find(nCurLine, ':x:0:0:') > -1: nFoundRoot += 1 if nFoundRoot > 1: intruder(nCurLine, nFoundRoot) realLine += 1 file.close() if nFoundRoot <= 1: print "[$] Nothing evil found. Script halting." main()