Bonus question… Have you ever said “yeah, that fits” once you got a password?
“Alright, I’m in now.”
Every time. Your mom’s getting tired of me saying it.
This was the perfect balance of sardonic response and 90s/early 2000s
Of all the fake things you see on tv about hackers, that part is real.
Even if you don’t say it, oh you’ll feel it. Even if you’re just dicking around on your own network and exploit something from a guide as practice…
Yeah, I’m in.
No, but I have leaned back in my char and cracked my knuckles.
I’ve said both. I’m a professional pentester / red teamer, and yeah, we send each other “I’m in” memes when we pop a box.
Yes. Most of them were east-to-find solutions on the web, or someone else giving me access. “Can you reset my password on Blah?” “Try TempP@ass123.” “I’m in, changed password. Thanks.”
A few times when I am really acting like a Senior Linux Administrator is figuring out a kludge or back door nobody had thought of. Recently, a client told me that the former admin had left and didn’t leave the password to over 300 systems (it turns out he did, the client was clueless, but I didn’t know that in the moment). I found every system the admin had access to, and looked for a dev box where he had access but I could take down during production hours. I took it down, booted into init with /bin/bash, changed root password, brought it back up. Then I checked his home directory to see what public keys he had. Based on that, I checked to see if there were any private keys on the bastion systems that matched as a pair (using ssh-keygen -l -f on each pair to see if the signatures matched). They checked which pair had no password. That was pretty quick because I quickly discovered a majority of these cloud systems also had an ec2-user that could escalate to root via private/public key pairs (it is supposed to be removed for security reasons, but wasn’t). Within a few hours, I had full access back to all their systems. Without taking down production.
“I’m in the mainframe”
During the CrowdStrike clusterfuck? Damn straight we did.
I believe that might be slightly relegated in favour of the more colourful ‘show time’.
I say it every time I have to hop onto a production box at work. If I’m in a call while it’s happening I usually drop a one-liner. Gotta have fun with these things.
Yes. All the time
