command prompt in school

Tural · Post by **Tural** » Fri Feb 08, 2008 8:20 pm

galvination wrote:You people talking about messing on school computers are idiots. See you in juvenile hall for Network trespassing and vandalism. I'm actually paying 420$ for being an idiot and messing with my school server. So all you who think it's "great fun" enjoi your B& from school.

But all the cool kids are doing it.

DEEhunter · Post by **DEEhunter** » Fri Feb 08, 2008 8:26 pm

If you cant run cmd to get the websites IP then just use a pinging site or write down the IP addresses at home so you cant put it in your school computers! Its simple really but i only know the blocking system of my school district and it doesnt seem that hard to bypass.

TomClancey · Post by **TomClancey** » Fri Feb 08, 2008 8:39 pm

8e6 has a pretty tight internet security protocol. Thy only way I can bypass ours is with UltraSurf. (Not that I do, but if I needed to for something school related, I'd use it.)

ceberus0 · Post by **ceberus0** » Sat Feb 09, 2008 1:01 pm

This is how to change the passwords of other accounts w/o even logging into them.
1. Open Command Prompt. If your school blocks everything fun, go to notepad, type, "start command.com". (without the quotes) SAVE AS "cmd.bat". (without the quotes)

2. Once in Cmd Prmt, type "net user".

3. Next find the desired account, type "net user (insert account name here) *"
4. It will promt, "Retype password". Type password.

5. Confirm it.

6. Done. Type exit and leave. YAyz.

Tural · Post by **Tural** » Sat Feb 09, 2008 1:04 pm

What a stupid thing to do.

This topic is going to be locked if people continue to advocate malicious alterations against government organizations.

Jdogg · Post by **Jdogg** » Sat Feb 09, 2008 3:31 pm

i kept on sending messages to the teachers computer in computer lab with the NetSend thing

0m3g4Muff1n987 · Post by **0m3g4Muff1n987** » Sat Feb 09, 2008 3:33 pm

Wow. I gotta write this stuff down. I'll never be bored again.

Actually, I just remembered, we're going to the computer lab in geography on Monday. I should probably use the netsend thing. What is it, just "netsend <insert student logon name>"? Then you can pretty much start a chat with them?

Kirk · Post by **Kirk** » Sat Feb 09, 2008 4:10 pm

Cerberus, if your school blocks everything fun, then what are the chances that it'll allow the use of .bat files :/

But yeah, I'm with Tural.

Outrage · Post by **Outrage** » Sun Feb 10, 2008 5:38 am

DEEhunter wrote:Ping (blocked website here)
Put Ip address of a website in your internet browser.

I do this alot at school to go on youtube and image shack.

Wow. That hasn't worked at my school in a couple of years.
All you have to do is route your connection through an external server.

Wanna make things more fun?
Set up Remote Desktop on your home PC. You can then access it through Internet Explorer. They can't block YOUR computer's internet!
It's not breaking any rules.

We had one kid use the shutdown command (you can find it yourself if you want it that bad), but he forgot to put a target in. Guess what? Global shutdown.
High school. Junior high. Grade school. Teachers and students.
You bet his a** got suspended.

[cc]z@nd! · Post by **[cc]z@nd!** » Sun Feb 10, 2008 6:32 pm

lulz, playing around on school computers.

it's really lost the fun for me lately, and i don't wanna get in trouble for doing anything stupid anyways, especially if it's my account i'm logged into. anyways, summary of dumb things:

my old school issued out usernames/passwords and told you to write it in the first page of your agenda. find agendas on the floor or borrow them to go to the bathroom = 50+ working user accounts by the end of the year. based on previous knowlege i knew the only way they kept tabs on people was with the account name, so I essentially had free reign to dick around.

command prompt blocked? navigate to %WINDIR%\system32\command.com and run it. found it so handy i copied mine from home and have it on my jumpdrive.

blasted filter blocking google images? they blocked images.google.com, so i change the URL to www.google.com/images?searchterms, etc. or froogle.google.com/images?asdf. cake.

bring portable firefox on a jumpdrive and configure it to use an external proxy. change proxies when they get blocked.

UT LAN games in networking when we were done with work, lol.

cracked the school's WEP key. when they figured out kids were getting on with their laptops, they started blocking MAC addresses. a simple MAC address changer fixed that.

grabbed the SAM file and cracked the password for the local admin account on the pc. since they used the same password on all the PCs, we basically had local admin account on every workstation. did they use the same password for the DC? i wasn't dumb enough to find out. (hint, the password was four lowercase letters long. cracked in just a few minutes. this is why strong passwords are important)

they left a file that contained sensitive info on every student on a network drive. phone numbers, addresses, DOB, grade, homeroom, username, etc.

figured out the entire county had their schools networked together. i didn't screw with it enough to figure out how (likely not netbios unless they used a VPN, or it could've been samba) but i did figure out i could pull a sort of directory traversal and browse other school's networks.

left an enticing file on the public drive, like "TEST ANSWERS" or "FILTER BYPASSER". it was really a forkbomb, so the ne'er-do-well would find their computer crashing within the minute. joke's on them!

things i wasn't dumb enough to do but potentially could've based on what I had:

the permissions weren't set right on their documents and settings\all users\start menu\startup folder, so i imagine i could've set anything from keyloggers to backdoors to run at startup without even needing a privileged account.

fucked around on other school's networks, or possibly even teacher/administrator computers if the netbios names weren't relatively unintelligble.

the network architecture was basically a room of computers connected to switches connected to a few routers, so an ARP poison would've been deadly. never tried though, because i wasn't entirely sure what would happen to the network, like if it would die, or if i would leave traces behind.

all-in-all, i hope i didn't cause the admins undue grief, and these are all really dumb things to do, so don't get any ideas. it's your ass on the line, not mine.

JK-47 · Post by **JK-47** » Sun Feb 10, 2008 8:22 pm

Being able to dig around like that would be interesting.. But I'm not wanting to risk it. Especially because my school shares a network with the University we're located at >_> Knowing me I'd click the wrong thing and mess something up.

0m3g4Muff1n987 · Post by **0m3g4Muff1n987** » Mon Feb 11, 2008 1:56 pm

OK WTF. I tried the netsend thing in school today and it didn't work. Here's exactly what I typed in: "net send 93mjeanneret hey".

It's his username for when he logs on. The school automatically assigns us logon names beginning with the year we're born in (he was born in 93), our first initial and our last name. His name was Matt Jeanneret so his username is 93mjeanneret. What did I do wrong? (BTW, the error that came up was "the alias of the message could not be found" or something like that)

TomClancey · Post by **TomClancey** » Mon Feb 11, 2008 1:58 pm

It's computer name, not login name.

0m3g4Muff1n987 · Post by **0m3g4Muff1n987** » Mon Feb 11, 2008 2:01 pm

I tried that too, but it didn't work. Or at least, I tried the computer I was on and it didn't work. Since the tech guys at our school disabled the option to look at system info, I can't find the computer name easily. So I used one of the net commands (I forget which one) and found that the computer name was the initials of our school, hyphen, the room number of the computer lab we were in, hyphen, and I guess the number of the computer I had which happened to be 13. So I tried sending something to myself and it didn't work.

TomClancey · Post by **TomClancey** » Mon Feb 11, 2008 2:04 pm

You have to have the service 'messenger' enabled, and started to do it.

You can get into services by typing 'services.msc' into command prompt. But, I doubt you can start/stop any services in it, as I can't at my school.

0m3g4Muff1n987 · Post by **0m3g4Muff1n987** » Mon Feb 11, 2008 2:11 pm

Crap! Actually, when I was experimenting with the net commands, on a couple of em, they asked me if I wanted to enable the messenger service, and I said yes but then it said "error code 5: access denied" or something along those lines. Shit. So that's what it is. Now I can't make a message pop up on my friend's screen that says "system error. Erasing hard drive now..."

DEEhunter · Post by **DEEhunter** » Mon Feb 11, 2008 2:13 pm

I dont thing i would go that far really. But its good to know these things anyways. I know the system my school uses for storeing grades and so. It may be funny to use firebug on it.

sneakyn8 · Post by **sneakyn8** » Mon Feb 11, 2008 3:27 pm

0m3g4Muff1n987 wrote:Crap! Actually, when I was experimenting with the net commands, on a couple of em, they asked me if I wanted to enable the messenger service, and I said yes but then it said "error code 5: access denied" or something along those lines. ****. So that's what it is. Now I can't make a message pop up on my friend's screen that says "system error. Erasing hard drive now..."

its because your not an admin hers how to make you one

some schools may not call their admins 'adminstrator' and so you need to find out the name of the local group they belong to.

Type: net localgroup

It will show you what they call admin, say at my school they calll it
adminstrator so then i would

Type: net localgroup administrator your username /ADD

TomClancey · Post by **TomClancey** » Mon Feb 11, 2008 3:43 pm

I don't think that's a smart thing to do, as it could be used for malicious intent, which, as Tural said, is not to be discussed in this topic.

sneakyn8 · Post by **sneakyn8** » Mon Feb 11, 2008 3:58 pm

it could be but in this instince its notremote pc through command prompt