Staredit Network > Forums > Technology & Computers > Topic: Hacking teh School
Hacking teh School
May 26 2009, 12:52 am
By: BiOAtK  

May 26 2009, 12:52 am BiOAtK Post #1



Alright, so a few months ago I hacked the school by making an admin account named mudkipz. Lulz. Anyways, the school found out and instead of charging me with a felony (which apparently hacking public schools is) they made me write a paper-type thing on how I did it. I still have it on my HDD, so I decided to put it on SEN. This is purely educational, so don't misuse it.

Warning: Well over half is complete bullshit :D

Code
A batch file is a file that injects commands directly into a computer whenever it is opened. You make a batch file by typing commands into a text editor and saving the file as a .BAT instead of saving it as a text file. Notepad, which comes with Windows, is a basic text editor commonly used to make batch files. To make a batch file in Notepad, you would type the commands you wanted in the batch file, and then you would click File, then Save As, then click Save As Type and change it to All Files. This makes it so you can make your own file ending, like .BAT, instead of the default in Notepad, .TXT, which is a text file. Then, you would save it like you normally would, but put .BAT at the end. This makes it a batch file.
    Now that you can make batch files, you need to know how to make commands. Commands for batch files are sorted into large categories, like NET and IPCONFIG. Then, those groups have subcategories, like NET has USER and LOCALGROUP, both of which we will be using to make an administrator account. Those subcategories then have objects. USER has all the usernames on the computer and LOCALGROUP has all the groups on the computer, like Administrators and normal Users. The commands in batch files are typed like this, for what we need to do to make a batch file: CATEGORY SUBCATEGORY OBJECT /PARAMETER. An example is NET USER HARRY /DELETE. This would go into the category NET, find the subcategory USER, find the object HARRY, which would be a username on the computer, and then delete it with the parameter /DELETE.
    There are two steps to making an administrator account. First, you need to make an account, and second, you need to put that account in the group Administrators. To make an account, you need to build a command starting with NET. NET is the category that has information about the computer, like its users, their passwords, and groups like Administrators and Users. Then, we have to go to USER in NET. This accesses the users. Then, we make a new object named NEWUSER and add the parameter /ADD. This adds a new user named NEWUSER. The whole command is this: NET USER NEWUSER /ADD. What I did specifically, however, was NET USER MUDKIPZ /ADD. Next, we need to make this new user an administrator.
    The command to make an administrator is similar. It starts with NET, to access the computer’s information. Then, you add LOCALGROUP to make it access the groups like Administrators and Users. You add the object ADMINISTRATORS, to access the group Administrators, and then you add a second object, NEWUSER, the user we just created. Then, add the parameter /ADD, to add the user NEWUSER to the group ADMINISTRATORS. The whole command is NET LOCALGROUP ADMINISTRATORS NEWUSER /ADD. What I did to make MUDKIPZ an administrator was NET LOCALGROUP ADMINISTRATORS MUDKIPZ /ADD.
    Now all the commands are built, you need to save the file as a batch file using the instructions in the first paragraph. Whenever you open the newly-created batch file, a new user named NEWUSER is created, and then added to the group Administrators.




None.

May 26 2009, 1:02 am Centreri Post #2

Relatively ancient and inactive

My brother did something similar. He then gave some infos to some person who was writing a fiction book about some hacker. He had to write something up too, I believe. But he was banned from some computer use.



None.

May 26 2009, 1:12 am Vrael Post #3



So wait a tick, it let you create an administrator account without being on an administrator account?



None.

May 26 2009, 1:16 am Jack Post #4

>be faceless void >mfw I have no face

I told my mate how to get onto youtube with a BIN file that starts up the cmd prompt and then pings youtube for its ip but then the admins closed it down and put up proper blocks. I think i know a better way now but idk if they have vista or xp there which may make my idea fail.



Red classic.

"In short, their absurdities are so extreme that it is painful even to quote them."

May 26 2009, 4:19 am MasterJohnny Post #5



how did they find out it was you?



I am a Mathematician

May 26 2009, 4:39 am Demented Shaman Post #6



Lol, is that really how you do it?



None.

May 26 2009, 5:01 am Vrael Post #7



Be funny if someone brought an OS CD with them or something and booted to that instead, that'll get you by any kind of protection they put on the computer :D
(except if they change the bios settings so that you can't boot from a cd drive)



None.

May 26 2009, 5:20 am Falkoner Post #8



Wow man, that's pretty nubbish being caught like that, at least if it was through software, if it was otherwise, then you're still good.

Honestly, my entire district is connected to a single server, at least 4 schools with over 3000 students, all connected to the same central area, and yet they still have horrible security. While I find it fun to hack into things, they generally don't go after you unless you're doing something malicious, which I feel no need to do, since I have good enough grades that there's no reason to change them, and screwing up anything else would not benefit me in any way.

Of course, if you were able to hack their system simply by having an administrator account, that's pretty sad security there..



None.

May 26 2009, 7:30 am DT_Battlekruser Post #9



That's boring.. You know what's more fun? Getting people to execute something containing this (we use Java): http://java.sun.com/javase/6/docs/api/java/awt/Robot.html

Although I am tempted to try it some time. Our sysadmins seem to think they have stopped us from using DOS or batch files, but they haven't even locked command.com :P




None.

May 26 2009, 8:54 am Jack Post #10

>be faceless void >mfw I have no face

Yeah,and make it open up cmd prompts that show text saying stuff like:opening backdoors...installing rootkit...deleting administrator control sequences,random stuff like that.



Red classic.

"In short, their absurdities are so extreme that it is painful even to quote them."

May 26 2009, 11:26 am Vi3t-X Post #11



Meh. I just boot up DSL on the school computer.



None.

May 26 2009, 2:11 pm Falkoner Post #12



Quote
Although I am tempted to try it some time. Our sysadmins seem to think they have stopped us from using DOS or batch files, but they haven't even locked command.com :P

Yeah, our admins tried blocking it for a while, I ended up deleting Novell on any computers I used because I got tired of my programs being messed up, I think too many system programs use command.com to block it, so they just hope no one knows about it.

My programming teacher had this program that would spawn sheep on the screen, and they'd walk around grazing and crap, it was hilarious :P



None.

May 26 2009, 10:34 pm BiOAtK Post #13



I didn't do anything malicious. Our school security sucks. I didn't try to circumvent anything, I knew I would prolly get caught. I was just super bored, lulz.



None.

Jun 4 2009, 6:47 am WoAHorde Post #14



Quote from MasterJohnny
how did they find out it was you?




None.

Jun 4 2009, 4:14 pm Jello-Jigglers Post #15



Quote from WoAHorde
Quote from MasterJohnny
how did they find out it was you?
Thankyou. lol



None.

Jun 4 2009, 4:46 pm payne Post #16

:payne:

Does this really works? XD
I had already used some batch files with commands like del C:\*.* which is a funny one, you should try it out ;) (JK :O)
Anyways... back in my high school, I also did some very basic hack on the system (and got caught -.-): I had created a sharing file for all the students of the school and had installed games like D2 in it so people could play it at school XD
Lol?



None.

Jun 4 2009, 4:56 pm Falkoner Post #17



Quote
I had already used some batch files with commands like del C:\*.* which is a funny one, you should try it out ;) (JK :O )

Yeah, that's the kind of malicious stuff I'm talking about :P

And they work because batch files use command.com to run the command, not cmd.exe, which is usually what admins block, you can't really block command.com because it stops lots of normal programs from working properly.



None.

Jun 4 2009, 6:41 pm Vi3t-X Post #18



My school apparently upgraded their networks. Everything I've tried has failed. :(



None.

Jun 4 2009, 8:00 pm Falkoner Post #19



Quote
My school apparently upgraded their networks. Everything I've tried has failed. :(

What NOS do they have on it now?



None.

Jun 4 2009, 8:48 pm Jack Post #20

>be faceless void >mfw I have no face

You don't need the network for BAT files. If you wanna go on youtube or whatever on your comps, try googling for anonymizers, they let you browse while in one website. If you're trying to get in from the outside then I don't want to help you, too dangerous stuff that can be used for other places besides schools.



Red classic.

"In short, their absurdities are so extreme that it is painful even to quote them."

Options
  Back to forum
Please log in to reply to this topic or to report it.
Members in this topic: None.
[01:35 am]
Ultraviolet -- Vrael
Vrael shouted: NEED SOME SPORTBALL> WE GOT YOUR SPORTBALL EQUIPMENT MANUFACTURING
Gonna put deez sportballs in your mouth
[01:24 pm]
Vrael -- NEED SOME SPORTBALL> WE GOT YOUR SPORTBALL EQUIPMENT MANUFACTURING
[2024-4-30. : 5:08 pm]
Oh_Man -- https://youtu.be/lGxUOgfmUCQ
[2024-4-30. : 7:43 am]
NudeRaider -- Vrael
Vrael shouted: if you're gonna link that shit at least link some quality shit: https://www.youtube.com/watch?v=uUV3KvnvT-w
Yeah I'm not a big fan of Westernhagen either, Fanta vier much better! But they didn't drop the lyrics that fit the situation. Farty: Ich bin wieder hier; nobody: in meinem Revier; Me: war nie wirklich weg
[2024-4-29. : 6:36 pm]
RIVE -- Nah, I'm still on Orange Box.
[2024-4-29. : 4:36 pm]
Oh_Man -- anyone play Outside the Box yet? it was a fun time
[2024-4-29. : 12:52 pm]
Vrael -- if you're gonna link that shit at least link some quality shit: https://www.youtube.com/watch?v=uUV3KvnvT-w
[2024-4-29. : 11:17 am]
Zycorax -- :wob:
[2024-4-27. : 9:38 pm]
NudeRaider -- Ultraviolet
Ultraviolet shouted: NudeRaider sing it brother
trust me, you don't wanna hear that. I defer that to the pros.
[2024-4-27. : 7:56 pm]
Ultraviolet -- NudeRaider
NudeRaider shouted: "War nie wirklich weg" 🎵
sing it brother
Please log in to shout.


Members Online: Roy, jun3hong