Find accounts with UID 0 and root privileges
find users with uid 0 | check for hidden root accounts | linux backdoor root user | awk | users | rootawk -F: '$3 == 0 {print $1}' /etc/passwdPrints all usernames from /etc/passwd whose UID is 0. Each of these accounts has full root privileges, regardless of its name. On a clean system, only root appears here.
Note: Any other match should be investigated immediately, attackers like to create accounts with inconspicuous names and UID 0.
Also searched as
- find users with uid 0
- check for hidden root accounts
- linux backdoor root user