Reset Fog Password

[george1421]

Just to be clear, you want to decode the password of the FOG web ui user fog or do you want to reset it to something you know so you can regain control of your fog server?

[Tom Elliott]

It is md5 hashed so no decoding it. I don’t know who did it but they didn’t reset the password over pxe. Either they manually did it through MySQL or the web ui.

I would highly encourage you to update to a more recent build of fog for many new features and bug fixes.

At any rate to reset your fog password access MySQL. Then run

UPDATE fog.users SET uPass = MD5(‘password’) WHERE uName = ‘fog’;

Of course change the password to whatever you want the password to be set to.

[george1421]

If you simply want to reset the fog ui user fog back to the default you could execute these steps.

1. Log into the FOG server’s linux console and use sudo to switch to root.
   sudo su -
2. Confirm you are root
   whoami
3. Log into mysql client
   mysql -u root
4. Switch to the fog database
   use fog;
5. Update the fog ui password. (SQL code borrowed from Tom’s post)
   UPDATE fog.users SET uPass = MD5(‘password’) WHERE uName = ‘fog’;
6. Confirm that its set
   select uPass from users where uName = 'fog';
7. Attempt to log into the web ui with use fog and the default password.
8. Change the password so something secure.

Hint: The apache access log would give you the IP address of the system that was used to log into the fog ui when you suspected the password was changed. Find the owner of that IP address and talk to them using a big baseball bat.

[Tom Elliott]

@george1421 for 1.2.0 blowfish encryption wasn’t used, at least I don’t think it was it’s been a while. The md5 method will work for all versions for now though as when you login if it finds the password was md5 it updates it to blowfish style encryption.

[george1421]

@tom-elliott Yeah, your way is a bit easier. I just tried to reverse engineer what I had on hand. I didn’t consider how old 1.2.0 was. Well done!.

Full Disclosure: I updated my post with your SQL code which is more appropriate.

[A Former User]

@tom-elliott
Sorry, I didn’t make it clear. It was through Web UI using an Office Computer that is connected to the server over PXE.
Yes, I have this option in mind (updating fog).

[A Former User]

This post is deleted!

[Tom Elliott]

@richardname hashes by their very nature are unable to be decoded. The best you could do is a dictionary attack that would try any/all combinations until a matching hash is found.

[A Former User]

@tom-elliott
Its what I did
Hash found! Guilty Found!

[x23piracy]

@richardname said in My fog server hacked! Help!!:

Guilty Found!

Let me guess, the charlady?

[A Former User]

This post is deleted!

[Quazz]

@richardname Impressive that you found out who it was by the password.

[Wayne Workman]

For future readers: https://wiki.fogproject.org/wiki/index.php?title=Password_Central