oh I had root access, but I believe the point of this exercise is to crack the password. After all, the next time the admin tries to login and realizes his password has been changed, you're done.

instead, I exploited the kernel to gain root privileges, then elevated a normal user to root. He's not likely to complain, and hopefully the admin doesn't notice. And for good measure I have a backdoor as well.

Unfortunately i'm nearly 4 hour into the GDict (not counting the other's I tried) and no luck actually cracking root's hash

Thanks.

Question. by running ettercap (or a sniffer) I am able to see that one of the hosts is sending its root credentials over ftp. I want to do the same for the second host, how do I do that? both hosts are running vsftp.