Let's say an anonymous user somewhere on the internet claims that he or she is the admin/root user of the system/server behind some public IP Address.

I was thinking, what can a root user do that a normal user on a system cannot do?

Is it possible, without putting the remote system at risk (like opening hundreds of ports), to verify the full ownership (in this context: root access) of a remote system?

  • 1
    This depends on the exact setup of the system. You could create a file in /.well-known/, assuming a web server is running, or you could open a low port (a port below 1024, which typically requires a privileged user). – forest Feb 8 at 6:02

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.