Log in

View Full Version : Hackers


JJJ
June 15th, 2007, 12:59 PM
Has any of you ever hacked into your school network and how?:yeah:

mmc deadly
June 15th, 2007, 05:23 PM
Yeah ive done it, its basic shit. If you had any knowledge of hacking you should be able to yourselfwork it out yourself, why u wana hack it?

Blahages
June 15th, 2007, 10:32 PM
Depends on how you Define Hacking. My school's network was about the least secure I've ever seen. All the security (Aside from the File access permissions on the server) was controlled via the local workstation. All the internet Filtering, rights, etc. Everything. So, basically, you could bring in an XP or Linux Live CD, and boot off it, and have full access to the Internet, unfiltered, and the to the local computer. You could also bring in your laptop, and connect to the network just by plugging into the Network Drop. It assigned everything via DHCP, so you plugged in, you had full internet access, not logged, or anything.

I don't really consider that "Hacking" in the normal Sense, but theoretically, it is. I haven't gone for anything more, there was no need to.

I work in a school district now (Started there last year of HS as a paid internship) in the Tech department, and their network is set up a lot better. Everything's controlled by the Server, Firewall, or something else. Not the Local Workstation. You have to be logged into Novell to access anything on the network, including the Internet. Granted, there is a way to bypass the proxy and internet filtering, but only a few people know how to do it, mainly the Tech department.

Everything's logged by default. So, I could go in, and look up your activity on the Network or Internet if I wanted. Just for fun, I periodically go through the proxy logs finding students that are using internet proxies, or accessing sites that are against the AUP they signed, and get them kicked off the internet for a couple weeks, including a conference with the principal, or Suspension depending on the situation.

I set up the local workstations to have Full rights to the local computer. I don't care what they do to the computer, it doesn't matter. Everything gets restored to a preset configuration everytime they reboot either way. Everyone is the Administrator of their Local Workstation. I had a time where I disabled Wallpaper changing just for the fun of it, and I also shut off Windows Messenging, because the Students found out that existed. Now, if they attempt to send a message, a message box pops up saying:

http://i19.photobucket.com/albums/b191/blahages/NetSend.jpg

Granted, It's just there to scare them. Nothing is sent to us telling us that it was done. It's just funny. I got bored, so I wrote it, and distributed it to all the computers.

You wouldn't like me if I was working in your district. I mess with the kids all the time. I can watch all of the computer screens in the Labs from my laptop and remote control them easily. There were several occasions where I just sat at watched the traffic for a while, and realtime blocked sites that they were using that they shouldn't be. Mainly, gaming sites, and proxies. So, they'd refresh, or try to play another game, and it'd say "Error 403 Forbidden."

There were two instances where I found a word document of proxy sites that worked in the district, that hadn't been blocked on student's userspaces. I added both lists to the block list, and edited the word document and erased the URLs on one, and left the other, but appended "Thank you for aiding the Tech Department in preventing access to sites which have been deemed inappropiate for school use. We thank you for your efforts."

It's quite funny. I'm not sure how they see it. I really don't care. One of the kids said they had won against the Tech department, because they could still find sites that weren't blocked. And, another said that no, they hadn't, because I had gotten tired of it and just shut off their entire internet access. You can't block everything, but I can sure try. Haha.

There's also been instances when I see that someone's going to do something that they shouldn't be. Like, searching google for how to bypass proxies. One time, instead of banning them from the internet, I saw them getting ready to do it, and sent them a message saying "I wouldn't do that if I were you." And, they closed right out of it.

There was another instance where someone was caught searching Google Images for Pornography. I watched them for a minute, took a few screenshots to present as evidence, then sent them a message saying "You ARE being WATCHED." They started moving their mouse all over like crazy, and closed the browser, and went to google images and started searching for Bikes, like nothing had happened. I then sent an instant message to the teacher in the classroom and said "Go remove <INSERT KIDS NAME HERE> from the computer, he's looking at porn." And, the computer suddenly turns off, and he gets in a lot of trouble.

Sometimes students bring in BattleField 1942, or UT2004, and play a LAN game in the class. I've had instances where I just highlight all the offenders, and power off their computers, or reboot them.

Yes, I abuse my Powers. :)

123456
June 16th, 2007, 01:56 AM
Has any of you ever hacked into your school network and how?:yeah:

I've done a few things with the school computers back in high school...not really hacking but fun

1) Managed to install Real VNC so I could link to my home computer and play games and everything

2) They had every site blocked and used IE for Internet and so I found a way to install FireFox and it bypassed ALL the Internet blocks.

Glasgow
June 16th, 2007, 10:33 AM
I havent really hacked them but its real fun to mess around with em. I downloaded Avant Browser and that fucked up everything. I also go to Windows Task Manager and shut down a bunch of processes. I download abunch of programs and keep em hidden in the S drive aswell. Everyone in my school are idiots so they dunno what im doing on there. I did manage to download Gunz: The Duel on there and play it during lunch, that was shit though cuz our PC's have the shittiest graphic cards and about 250mb of ram. Thats about it, I change the background on occasion or use a proxy site to bypass the restrictions.

JJJ
June 16th, 2007, 11:20 AM
Yeah ive done it, its basic shit. If you had any knowledge of hacking you should be able to yourselfwork it out yourself, why u wana hack it?

I never said i hadnt done anything to the school computers.

I wrote some vbscripts and made error messages pop up on random computers, using a batch file I got command prompt and gave myself administrators privaleges. With admin privaleges I shut down random computers in the middel of classes and mucked about on the network a bit. I found the SAM file and uncoded it giving me everyones usernames and passwords even the teachers which was very useful.

In the end the teachers did catch me because the IT teacher guessed it was me and scanned my acount. I got banned from using school computers for a year but I made friends with the new administrator and helped him makesure no one could do it again. I left school last week but they have offered me a job however I am not taking it instead I am studying more about programming at college.

Antares
June 17th, 2007, 12:27 AM
Blahages,
Your not abusing your simply doing your job! Lmao!

I have never tried because there is nothing to hack and plus our whole school is Apple and then everything is through Novel so its really not worth the time.

Blahages
June 17th, 2007, 11:03 AM
Blahages,
Your not abusing your simply doing your job! Lmao!

I have never tried because there is nothing to hack and plus our whole school is Apple and then everything is through Novel so its really not worth the time.

Of course I am. But, it's a good thing. I don't theoretically have to go to some of the lengths I do, but it's fun, so I have to. :)

Near the end of this School year, I decided to go through the proxy logs for like the days of May 7-11th and made a list of anyone who had used a proxy site to bypass the filters, and shut their Internet off for I believe 15 days. Technically, I'm supposed to do that for anything that ISN'T school related usage, but I'm usually pretty lenient. I will, and do watch and block in realtime any game sites that students are accessing, but I don't report them or turn their internet off for games, usually. I do do it for bypassing the filters, or viewing porn at school.

We use Novell. Some kid a couple years ago sat down at the computer teacher's computer, while they were out of the room, and had ConsoleOne opened, and gave themselves Administrative access to a lot of things, and then created a trail by creating text files in all their friend's userspaces telling them who it was, and something along the lines of "haha I've h4x0r3d your accountz!?11oneoneone1!!"

Needless to say, he was caught really fast, and I believe, suspended for a while. That was before I was there.

I can't even understand why that guy has ConsoleOne, OR administrative rights. No other computer teacher in the district does. And, he definitely shouldn't. But, he's been there for I believe 39 years this year. So, I don't know what gave them the idea to give it to him. At least, he's actually retiring this year after saying he'd retire for the past like decade every year, this one is for real.

JackDaniels
June 18th, 2007, 09:15 AM
lol in answer to your question.....yes i have hacked my school....

started doing it over a year ago and I'm still at it now, i've even written a couple of tutorials on the internet helped people do the same.

consider this...

my school network is VERY secure....the students have almost NO access to anything except their my documents folder (which of course is stored on the server) and all students use a roaming profile called 'student' which means that they cannot edit the profile and that it defaults once they log off (nothing is ever saved), students have no permissions over local computers and are restricted and hidden from basically all drives except for H: drive (the network drive to my documents)....

right well... one of the admins at the school (the head admin now) was a bit worried about network security and what students could and couldnt access...and he asked me to have a look and see whats possible from a student account.....

well..with no access at all i managed to get the local admin password (boot from floppy disk and use a dosrar program to rar the sam and system files), that gave me instant local admin (after about 5mins wen a good password cracker on the merged password files (Proactive Password Auditor), from there, log in as local admin and run a registry hack that dumps the last 10 users that logged onto the computer or something, this dumped a network admin account

use PPA to run hack against the network server using the network admin credentials and it returned a list of every username/password in the school (includin head teacher which is always fun lol)

i have been working with the ICT department since helped them to secure the network (although it is NOT fully secure as of yet...this is due to the exploits i used being caused by windows being sh*t lol)

i now have a network admin account (done it myself, but had permission from network admin) and have assisted many students/teachers with problems (i'm well known for my hacking in school)

from this i have even comprimised the 'admin' network containing all staff and student details as well as grades/addresses/medial records, i've also accessed the digitial register service as admin, meaning i can mark myself in for lessons even if im not there!

and now have got the security cameras under my control :P

o ye, also hacked a Mac OS X server as root in the process

Blahages
June 18th, 2007, 06:03 PM
lol in answer to your question.....yes i have hacked my school....

started doing it over a year ago and I'm still at it now, i've even written a couple of tutorials on the internet helped people do the same.

consider this...

my school network is VERY secure....the students have almost NO access to anything except their my documents folder (which of course is stored on the server) and all students use a roaming profile called 'student' which means that they cannot edit the profile and that it defaults once they log off (nothing is ever saved), students have no permissions over local computers and are restricted and hidden from basically all drives except for H: drive (the network drive to my documents)....

right well... one of the admins at the school (the head admin now) was a bit worried about network security and what students could and couldnt access...and he asked me to have a look and see whats possible from a student account.....

well..with no access at all i managed to get the local admin password (boot from floppy disk and use a dosrar program to rar the sam and system files), that gave me instant local admin (after about 5mins wen a good password cracker on the merged password files (Proactive Password Auditor), from there, log in as local admin and run a registry hack that dumps the last 10 users that logged onto the computer or something, this dumped a network admin account

use PPA to run hack against the network server using the network admin credentials and it returned a list of every username/password in the school (includin head teacher which is always fun lol)

i have been working with the ICT department since helped them to secure the network (although it is NOT fully secure as of yet...this is due to the exploits i used being caused by windows being sh*t lol)

i now have a network admin account (done it myself, but had permission from network admin) and have assisted many students/teachers with problems (i'm well known for my hacking in school)

from this i have even comprimised the 'admin' network containing all staff and student details as well as grades/addresses/medial records, i've also accessed the digitial register service as admin, meaning i can mark myself in for lessons even if im not there!

and now have got the security cameras under my control :P

o ye, also hacked a Mac OS X server as root in the process

Hah. You would have been entirely kicked out by now if you did it where I work. Granted, the network I'm on is a lot more secure, you'd never be able to do that.

For one thing, we don't use a Windows Domain. As for getting local passwords off the local computer, what were they thinking? The local password on the computers I work with are useless. You could get the password, and you wouldn't have any more access to things than you already do. I don't even know why they wanted an Admin password on the workstations. Everyone that logs in is created a dynamic local account with full administrative rights to the computer. We use Deep Freeze Enterprise to lock the computer down so you can't easily make changes to the computer. So, even with the Administrative password, you're not going to do anything. You install or corrupt something, you reboot, and it's all back to normal. Granted, I've hacked the program and disabled/removed it in the past, but it's difficult, and difficult if not impossible from within Windows. You can do it, though, fairly easily by connecting another drive to the machine, and setting the master hdd up as a slave, and mounting the registry from within that, and deleting several keys. You could do it from a boot disk, but it's more difficult, and either way, both of those are slightly noticable if you're trying to do them.

The network admin didn't even know what rights the student account had? That's pretty bad. It's easy to see on ours. And, we know exactly what rights everyone has.

Your workstations sound like they were set up nearly identical to the ones I had at my school. Drives hidden, permissions on the local computer, etc. All easy to get around. One of the funnier part about the Windows security, like when you try to type in "C:\" or something, and it says "Access Denied"
is that you can create a link, like say create a blank html document, and just create something with a link to file://c: and it works just fine.

How, exactly, are you meaning you got the list of all the passwords for everyone? That sounds a little farfetched. I'm assuming you brute force cracked them, IF you did, and that should take quite a while, especially if there's a lot of users. And, You'd think they'd lock you out after like 4-5 invalid password attempts.

Also, most things don't allow the Network Admin to retrieve your passwords. Maybe I just don't know anything about Windows Domains, but I'm 99.99% sure that it wouldn't let you do that either. I know with Novell, and any semi-respectable server, you it wouldn't allow that. You can change the passwords to anything you want, but not retrieve them.

You say your network is very secure. Assuming you WERE able to do all of this, which I'm doubting, then the network IS NOT very secure. It's a huge pos. VERY INSECURE.

You're making it sound like everything that requires an administrative password is the exact same password? That's kind of ridiculous, although I know it happens.

We have hackers/auditors come in like once a year and just tell them to sit and spend all day trying to exploit any hole they can find in our system.

cheetin
June 19th, 2007, 01:02 AM
ya my school is all mac so i hacked and installed windows xp onto every 1

Activate
June 28th, 2007, 09:29 AM
Before everyone found out how to do it, I would type the IP of the school intranet into the URL, and it would have all the school records.
I told one person, it just took one person for it to spread through the whole school
Good thing I printed out my whole years, so I have a hard copy :P

Kiros
June 28th, 2007, 01:29 PM
I've played Solitaire on a computer at my school! :P

Actually, I haven't done anything more impressive than William, so I'll spare the repetitive content.

tom223
July 25th, 2007, 10:05 PM
I brute forced my schools administrator account before, its funny how amazingly insecure school machines are. On half of them all you have to do is crash explorer.exe and restart it and you will be able to access command prompt and edit the registry ect.

mr. self destruct
July 26th, 2007, 12:58 AM
I remember up until last year, none of the computers in my school had any security or roaming student or teacher accounts. No filters, so everyone would be going on myspace when the teachers weren't looking. All the computers had two local accounts; teacher and student. The teacher account was password protected. The only problem was that the geniuses who set up everything decided to use the same password on every account on every computer. So, once i figured the password out, I was able to log into every teacher account on any computer. Pretty sad huh?

questionz
July 26th, 2007, 10:28 PM
its not hard. its fun to make a simple program that displays naughty images, and set it to run at startup.

heartagram72
August 3rd, 2007, 03:45 PM
damn...our school is pretty easy to hack. the security is terrible. i can shut down the whole network for the district with one click. they keep everrything in the open. try wickihow.com for how to bypass the filter.

Zazu
August 3rd, 2007, 06:05 PM
I know that our school network is actually quite secure, and tbh the only way you can do any damage is to get an admins / teachers password. I got that once by writing a batch file and shoving it on my memory stick so when I plugged it into a machine it would copy and run this keylogger. Well anyway, I got a teachers password and I gave it to a mate, who managed to change everyone's password in my year, he got bollocked for it though lol.

The only other thing I've done it write a .bat file which brings up dos and writes a message saying "You are trying run un-authorised programs, if you are not type n" so the person types 'n' and it shuts down their pc lol.

Glasgow
August 11th, 2007, 01:12 AM
The only other thing I've done it write a .bat file which brings up dos and writes a message saying "You are trying run un-authorised programs, if you are not type n" so the person types 'n' and it shuts down their pc lol.

Lmao thats classic!

Blahages
August 12th, 2007, 09:39 PM
its not hard. its fun to make a simple program that displays naughty images, and set it to run at startup.

It's fun reading how things are set up at different schools. I'm currently working as an "Intern" in the Technology Department for a school district (Although, really, I control everything that has to do with Workstation management, and a lot of other things. Basically, if they didn't have me, all they would have is servers. The workstations wouldn't be set up, or if they were, they'd be using 2-3 year old images on all the machines, that were pretty much unusable.) and this would be impossible where I work. I love the fact that every change someone makes to the computer is erased on reboot. Absolultely love it. It makes my job so much easier. I have to either put in a certain series of key strokes, then a password to allow changes, or use a program I have on my laptop to allow the changes. I can Wake on Lan all the machines in the entire district with a click of the mouse, reboot any and all of them, shutdown, allow changes, disallow changes, lock keyboard and mouse on any or all computers at once, send messages to the computers, etc. I can even watch the screens and remote control them.

All that, and the fact that I can see all activity anyone has done on the internet at any time I wish. Gotta love logging and everything.

I know that our school network is actually quite secure, and tbh the only way you can do any damage is to get an admins / teachers password. I got that once by writing a batch file and shoving it on my memory stick so when I plugged it into a machine it would copy and run this keylogger. Well anyway, I got a teachers password and I gave it to a mate, who managed to change everyone's password in my year, he got bollocked for it though lol.

The only other thing I've done it write a .bat file which brings up dos and writes a message saying "You are trying run un-authorised programs, if you are not type n" so the person types 'n' and it shuts down their pc lol.

This is why we don't give most people special administrative privleges. 99% of all teachers don't have too many more rights than their students. Of course, there are certain things they need rights to that their students don't, but they don't have anything that they don't have a dire need for. Everyone is assigned their rights based on whatever group they're a member of. There's a staff group, admin group, student group, etc. Everyone that is a member of a specific group has the same rights as everyone else in that group. If a certain person needs other rights, we assign them on an individual basis.

There are also certain teachers that would allow their students access to their accounts. Some did last year after the student had their internet access revoked for abusing their privleges, and a few teachers let those students on their accounts to access the internet.

If you're just talking about getting an Admin password for Windows, that's extremely easy. There are Live CDs around the internet that allow you to boot up and will crack the password in the matter of 1-3 minutes or less. There are also floppies that allow you to boot up, and clear the Admin password for Windows as well. If the administrator knew what they were doing, they wouldn't use the same password for Windows as they used for administrative access on the network. Like, with how I have things set up, there is no Admin password on the local machine. None, whatsoever. Everyone that logs in is, by default, made an administrator of the machine. There's absolutely nothing you can mess up on the machines we use, even with administrative privleges. And, even if you managed to entirely break something, which is doubtful, I can restore everything in the matter of 20-40 minutes anyway. It's extremely easy, all it takes it reimaging the computer from the network. And, most machines have the same generic image as everything else.

In fact, I'd encourage people to do their best to mess things up on the computers. Exploit something. I like to see if there's something I need to work on.

As for the Dos Batch file, I still prefer my little Message I wrote that pops up with attempting to do a "net send:"

http://i19.photobucket.com/albums/b191/blahages/NetSend.jpg

I just finished setting up the base images for all the Elementary Schools, and I've deployed it to all the machines at all but one school, and I made sure I included that in it. :-)

try wickihow.com for how to bypass the filter.

Thanks for the URL. I have little doubt that it's blocked where I work, but if it isn't by some odd sense of the imagination, it will be tomorrow. ;)

Zazu
August 13th, 2007, 09:14 PM
One more thing to all Mac users:

If you use mac you can get a great program called 'KisMac' which is a great network sniffer / network probe / WEP password cracker / server crasher.

I used it once to hack into our schools proxy network, and steal the internet on my laptop lol. ANd you can flood an IP with hundreds of thousands of completely random packets of info each second which can crash a server in a couple of mins :D Did that to my school network after my ICT teacher pissed me off. It's pretty easy, you basically do it in the stage where you're trying to get the SSID of the network hub, you change the incoming / outgoing packet rate and hey presto, one fucked server.

Frosty
September 3rd, 2007, 11:25 PM
Blahages, that's why i set up my own proxy server....and for games i have my own ftp server i'll download 'em from : P

Camazotz
September 4th, 2007, 07:30 AM
I have never hacked my school computers, because I dont see a reason to do so. I dont need anything from their computers. All I need is school help there, and Im done.

Aηdy
September 4th, 2007, 09:48 AM
My school network got a whole lot worse over the summer, they now have software that will lock the computer if you type in something like "msn, messenger, porn, proxy.." you get the idea, so thats that! Thank fuck I leave soon!

mr. self destruct
September 4th, 2007, 05:38 PM
If you use mac you can get a great program called 'KisMac' which is a great network sniffer / network probe / WEP password cracker / server crasher.
I love that program. I use it all the time to get free internet wherever I am.

Blahages
September 4th, 2007, 10:49 PM
Blahages, that's why i set up my own proxy server....and for games i have my own ftp server i'll download 'em from : P

Yep. That's why I periodically monitor our proxy logs to find out if anyone is accessing a remote proxy, and bypassing our filters. If they are, There goes their internet. ;)

Most proxies I've seen have tell-tale indications that they are proxies, like a certain string of "random" characters after the URL, or, the word proxy in them, or even the address of the site you're accessing (Like, For Example, Myspace.com) in them.

It also helps that I periodically watch the student's screens remotely, so I can actually witness them doing it.

And, if they WERE able to get around everything, and bypass everything unbeknown to me, and I completely miss it, then kudos to you.

We also block EXE and ZIP Files, among others. Granted, you COULD easily change the extension, and download the files, but if I decided to be a complete control freak, I COULD block downloading every file extension, I COULD block your Home IP Address entirely from the District Machines, I COULD restrict you to ONLY "www.something.com," for example, I COULD completely disable your internet in it's entirety, I COULD completely disable your account to even log into the machine, I COULD write some login scripts to screw with you, I COULD sit remotely from my laptop and screw with you, by executing random programs, scripts, mess with your keyboard/mouse remotely, ETC, Etc.

And, I COULD make it so you're not even allowed to touch a district machine, period.

I'm usually pretty lenient, though. MOST online games, I don't care about, TOO much. Educational Games, I ignore, normal Flash games, I sometimes ignore, depending on my mood, sometimes I block the site, and refresh your webpage, and you get a forbidden, and sometimes I leave you alone. If you're trying to access Myspace, which I completely despise, (Which means you have to be using a proxy, as it's blocked) then I WILL shut your internet off, and I will add that site to the block list. Or, if you're abusing some company's tech support online, like a couple students were doing with Alienware's last year, I'll, first block the live support, as you shouldn't need that at school in the first place, then I will turn your internet off, and report you, if I'm in the mood.

If you're playing some random Game, like Quake, or BF2, like I've seen some do on school time, when they shouldn't be, SOMETIMES, I'll turn your machine off. Sometimes, I'll just mess the game up a little, and sometimes I'll just do things to annoy the crap out of you.

As far as I see it, you sign an Acceptable Use Policy at the beginning of every School Year. You sign it, you're allowed to use the district machines. Which, means, you're supposed to abide by the rules set in the AUP. Which, means no games, no bypassing filters, etc. Now, depending on my mood (once again) I may choose to leave you alone, or I may choose to mess with you. As far as I'm concerned, if you're breeching the AUP you signed, I'm entitled to mess with you, and annoy the crap out of you, or do whatever it is I feel "necessary to prevent you from doing whatever it was you were doing in the future." And, until I'm told that I can't screw with people like that, I'll continue it.

It makes my job all the more interesting. Right now, student's don't have to worry about it, as I don't have much free time. Things are pretty hectic the first few weeks of school. I did most of the work this summer myself, which included completely installing and setting up 330+ new machines (Three Elementaries, and one Alternative High School), removing the old machines that were replaced by the new ones (To be recycled), blowing out all machines in the High School and Middle School (Machines are only two years old) with a reverse vacuum, as they were really dusty, resetting those machines up, and reinstalling all the software on all the machines, as we do a complete reimage of 98% of the Machines every summer (And Periodic Updates during the School Year) to keep everything as close to up-to-date as humanly possible, and functioning as well as possible.

Right now, I have Approx. 80 IT Requests that have been submitted in the past few days, that I have to get around to, various teachers wanting printers installed, software installed, computers moved, need to know how to do something, etc. But, when that slows down, I'll have time to get into the "screwing with the students" thing again.

End of last School year, I had about 85% of at least one Computer Class without Internet, because they had all been caught doing stuff they weren't supposed to.

I welcome you to try to get past me. If you can, Kudos. If you can't, and I find out, sucks to be you. It's all how you want to look at it. I'd welcome students to get past my watch. If they can, I'd like to know how, so I can do better. And, depending on what it was, I might not do anything to them if they showed me. Actually, if it's just a loophole they got around, and they personally showed me, I wouldn't do anything. I'd be happy to know it. But, if I catch them doing it, without me knowing, that's a different story.

You were forgetting that, if someone wanted to know, they COULD fairly easily watch what you were doing, see you're accessing proxy sites (Even on your Own Server) and playing games.

And, also, if you REALLY know what you're doing, you can completely bypass all of the things we have set up where I work. Like, my laptop is set up so it's completely unlogged, with unrestricted internet, and nobody there can tell what I'm doing, unless they're physically standing behind me watching. And, actually, it's quite easy to do if you know what you're doing, and you know how our network is set up.

I'm not a total prick, I just love to have some fun with the stuff. My Network Admins in my HS were completely incompetent. We were running Windows 2000, with, I believe "Surf Guard" or whatever it is called installed on the machines. Basically, all their security was workstation centered. You use their workstation, you're restricted.

However, you bring in your own computer (Laptop, of course) and plug into any network drop in a room (All were on, in the entire building) you'd get Full, unrestricted Internet Access, unfiltered, via DHCP. You'd also get access to all the printers in the district, unrestricted, and many other things. I once showed my friend how to send a message across the network, and he stupidly set the message "asdtkjsl" or something similar to all the district machines. The point is, you could do things easily, without a problem. Heck, you could even bring in an XP or Linux Live CD/DVD and boot their machine off it, and have unrestricted internet. It was all software restrictions.

We had Wireless too. I don't know if anyone fiddled around with that or not, as it wasn't needed, there were so many drops that were available. We don't use Wireless where I work now, my boss will not have it installed.

The Network Admin in my school didn't even know anyone was accessing anything with their laptops until someone (Idiot) went up to him and asked him for the WEP Key, and he wouldn't give it to him. And, then he asked why not and said that everyone had been accessing the wired network anyway for a while.

/Long Post

Patchy
September 22nd, 2007, 08:52 PM
Well every school network is different and it depends what you mean by "hacking".

if you mean like accessing admin accounts e.t.c theres like proper ways of hacking but what I did to get into admin was I saw my teacher logging on so I saw his user name...and on our system you can send password reminders so I guessed (after many attempts) the recovery question for his email and emailed a reminder...logged on as him....unblocked every website and deleted all the other admin accounts. this took me like 3 days and most techys wouldnt call this hacking this is just like guess work than hacking.

Blahages
September 23rd, 2007, 05:19 PM
Well every school network is different and it depends what you mean by "hacking".

if you mean like accessing admin accounts e.t.c theres like proper ways of hacking but what I did to get into admin was I saw my teacher logging on so I saw his user name...and on our system you can send password reminders so I guessed (after many attempts) the recovery question for his email and emailed a reminder...logged on as him....unblocked every website and deleted all the other admin accounts. this took me like 3 days and most techys wouldnt call this hacking this is just like guess work than hacking.

Your teacher has admin access? Good Security risk. Where I work, there are only a few people that do. I am one of them. There are, I believe 6 people with access to it. And, None of them are Teachers. Two I don't think should have it (Don't Necessarily need it), but they aren't a security risk. The other four are the guys in the Tech department.

We have "Password Reminders" turned on for the Students. I don't have mine set up, and I feel no need to. When I'm forced to use password reminders for something, I just pick a random question, and give something similar to "%#$%#$%435t$#%#tv34vt34qv7t843oqytv3QTE?RT?Wgqctnf8qty43q9tvyo43tr34qt"(?)*?_)7" as the answer. Something entirely random, that nobody, not even myself, could ever remember. If you're going to use a password for something as important as complete administrative access to an entire network, you shouldn't use passwords you might forget.

The guy I used to work with (Before he Moved this last June) used passpack to manage all of his passwords. It's completely encrypted everywhere, and he used it to generate 15-20 character passwords, with any and every character that existed as a possibility to be put in the sequence of characters as his password. Kind of Ridiculous, but there's not much chance of people getting into it.

Hyper
September 24th, 2007, 03:52 PM
I've done very small things.. As my friend told me who has been hacking since 1995.. ,, Your really talented, but you should get off your lazy ass and actually learn how to do things ^^ ''

Patchy
September 25th, 2007, 04:02 PM
I find at my school they think that all the kids are dumb and arent gonna try and gain access to other acc's etc.

Underage_Thinker
September 25th, 2007, 04:50 PM
gah getting on proxies is no fun. It isn't really that much of a challenge. Right now i am working on getting a botnet going. I also want to learn how to use sql injections.

ZodiacKiller
June 18th, 2010, 08:33 AM
That depends upon how you define hacking. I've got a bunch of batch files and vbscripts messing with the computers (people are really dumb- they get impressed by net send), but since I can't download a compiler, I can't really do much. On the other hand I have downloaded a disassembler (look it up if you don't know) named ollydbg.
-this is an edit, i didn't realize this thread was dead

Sith Lord 13
June 18th, 2010, 08:37 AM
EPIC BUMP!

wow. just wow.

Obscene Eyedeas
June 18th, 2010, 09:37 AM
EPIC BUMP!

wow. just wow.

Sorry but how in anyway was that helpful. You find a bump report it and it will be dealt with. Do not create a post for the sheer purpose of pointing out a bump as it serves absolutely no purpose. thank you
______________________________________________

:locked: please do not bump old threads