Lanschool v7.2

[Lyzon]

Hey ppl ^_^ lol i was just working on something in visual studio and remembered the lanschool manager i made... so i searched it up. lo and behold there are some new posts here :o

well i reuploaded it for you xquisite. if u have h20hs and it works fine, no probs. just makin it available again for others ^_^

http://www.mediafire.com/file/1iygnntdtmm/...l%20Manager.exe

edit. forgot to add that this still works in version 7.2.1.2s << the s shows up in the version number ... im guessing it means special? or super edition :P

[Bhawan]

hi all i just read this entire thread (bored) and i would like to throw a few suggestions out there.

1. Assuming that lanschool installs in the program files directory, can you just delete the .exe or some of the dlls it needs and just have it crash when it starts. or even better, just delete the whole freaking install folder of that thing.

However to do this you'd probably need admin rights. one way would be to just boot into a distro(backtrack or even dos) cd into sdb1 or whatever is equivalent of C:\ProgramFiles\Lanschool(or watever its folder is) and just delete the contents or the whole folder. Or: Last year i discovered that you could right click a file and click open with and then click browse from the dialog box that opens up you can delete contents of program files. However this may or may not working depending on the permissions and tweaks ur it ppl have implemented. Also, this allows you to go to sometimes restricted places such as my computer from where you can go to network and so on ....

deleting some files will just probably render it as broken leaving nothing that would show that it has been uninstalled as it will probably still show up in add and remove programs ..

[Lyzon]

well at my college, we have no rights to :

open "run"

open "control panel"

view "c:\"

copy files to hard drive

view and delete files to hard drive

close any process

run anything that needs admin rights...

so yea..

[h2oh4x!]

Most people who want to disable LanSchool will not have Admin rights on the machine or they wouldnt even have LanSchool on it lol. So deleting the files from C:\Program Files is out of the question. Not to mention that that would not work while LanSchol is running as Student.exe would be running locking the permissions to the file.

[Bhawan]

Most people who want to disable LanSchool will not have Admin rights on the machine or they wouldnt even have LanSchool on it lol. So deleting the files from C:\Program Files is out of the question. Not to mention that that would not work while LanSchol is running as Student.exe would be running locking the permissions to the file.

true that but you don't necessarily need admin rights to get into C:\Program Files and also you may not be able to delete the actual exe cause it will be in use but you can maybe edit or delete some of its required support files or dlls (hopefullt they won't be in use or locked). There are too many variables when you try to do this. It entirely depends on how your school's machines are configured. Also, could there be away to stop the student.exe from starting when the system starts without using msconfig ? Maybe a registry file because sometimes admins don't block .reg files.

[x-quisite]

Hey x-quisite ive made a LanSchool disabler based on Lyzons LanSchool Manager it disables the software easily just click kill.

P.S To my knowledge this will not work on version 7.4 or above however i have tried it up to version 7.2 and it works fine. Also this was programmed in Visual Studio 2008 so it requires .net framework. Have fun ;)

http://www.mediafire.com/?vztmmqyzj1z

Thanks..

Hey ppl ^_^ lol i was just working on something in visual studio and remembered the lanschool manager i made... so i searched it up. lo and behold there are some new posts here :o

well i reuploaded it for you xquisite. if u have h20hs and it works fine, no probs. just makin it available again for others ^_^

http://www.mediafire.com/file/1iygnntdtmm/...l%20Manager.exe

edit. forgot to add that this still works in version 7.2.1.2s << the s shows up in the version number ... im guessing it means special? or super edition :P

Thanks too..what u mean by special or super edition? u have made some improvement compared to your previous lanschool manager?

Anyway, i'll try both program.. Thanks again..you guys really helpful..nice to know u all

[Lyzon]

no i just mean, it works on lanschool student version 7.2.1.2s < there is an s in the model number. dont no wat it stands for lol

[Dubl El Pea]

Hey x-quisite ive made a LanSchool disabler based on Lyzons LanSchool Manager it disables the software easily just click kill.

P.S To my knowledge this will not work on version 7.4 or above however i have tried it up to version 7.2 and it works fine. Also this was programmed in Visual Studio 2008 so it requires .net framework. Have fun <img src="http://forums.hak5.org/style_emoticons/<#EMO_DIR#>/wink.gif" style="vertical-align:middle" emoid=";)" border="0" alt="wink.gif" />

<a href="http://www.mediafire.com/?vztmmqyzj1z" target="_blank">http://www.mediafire.com/?vztmmqyzj1z</a>

I used this program for over a year but I lost my usb stick last week <_< and I was wondering if you could re-upload the file?

[phark]

Lyzon please reupload ur amazing lanschool manager plssss :D

[Snuupy]

Hey, I'd like a reupload too, if possible =)

I found that LanSchool is ONLY controlled by LAN connections, so if you guys have a wireless USB adapter, it might actually work! Or you can just crash it.

[Lyzon]

Haha, never thought i would see this thread bumped. just by luck i stumbled apon it today... ok let me just find the exe and reupload... :)

[Lyzon]

http://www.mediafire.com/?p999h4ppy5xianr

http://www.filefactory.com/file/cb3a136/n/LanSchool_Manager.exe

https://rapidshare.com/files/461551717/LanSchool_Manager.exe

http://myfreefilehosting.com/f/bffc911a07_0.9MB

here you go ppl, prob the last time i will upload so i uploaded to a few diff hosts. Its exactly the same program uploaded years ago with no changes. whether it still works on new ls i dont know as I am too busy with uni work to care. Have fun, and dont get caught :)

[omg]

http://www.mediafire.com/?p999h4ppy5xianr

http://www.filefactory.com/file/cb3a136/n/LanSchool_Manager.exe

https://rapidshare.com/files/461551717/LanSchool_Manager.exe

http://myfreefilehosting.com/f/bffc911a07_0.9MB

here you go ppl, prob the last time i will upload so i uploaded to a few diff hosts. Its exactly the same program uploaded years ago with no changes. whether it still works on new ls i dont know as I am too busy with uni work to care. Have fun, and dont get caught :)

Awesome thanks!!

Any chance of getting the source code to continue development?

[Lyzon]

Awesome thanks!!

Any chance of getting the source code to continue development?

Erm, im not sure i still have it. ill have a look tho :)

[Lyzon]

i couldnt find the new source but heres the source for an earlier version, just no gui

http://pastebin.com/MpA8KsbP

[TuX^]

Lyzon, that's awesome!

One of our clients at work is a training provider and need to keep control of students. They've just opened an IT academy so we need to tighten the network security a bit more.

We were testing LanSchool at work and my colleague just wouldn't stop bugging me with it. He used Psexec to install it on my machine, silently. I found the Student.exe at the root of my C: Drive and deleted it (bad idea, I would later find out) so I couldn't uninstall it. The only way I could get rid of it was to boot into safe mode and delete the folder it creates in Program Files. Messy, I know.

Thanks again,

TuX^

[Snuupy]

Hey guys.

I've been tinkering with my school comps for a year, and surprisingly, all my tech teachers are super interested (or they couldn't care less) in how I could fix this problem, since I'm not running around and crashing every computer I see. They run LanSchool 7.0.0.3, along with DeepFreeze, and they have a server which intercepts all traffic with the M86 Web Filter. Our firewall blocks off every open port except 80, 443 (SSL), and 796 (LanSchool). They have also disabled right clicking. (Bastards, I need to create a new folder.)

The DeepFreeze application is server sided, and so are our desktops and Windows XP profile settings. I found h2oh4x!'s LanSchool Killer application extremely useful, and unplugging the LAN cable from the computers useful in making LanSchool nonresponsive.

What I've found is that student.exe loads AFTER you log on the windows prompt. This means that the moment you log on, you can disconnect the LAN cable, making it a hard disk boot (instead of a defaulted network boot). I had to do this because they locked the BIOS so that you couldn't change the boot settings, so I had to force it to boot to Windows XP on the hard drive. However, you still can't access the lskdata.bin files (keylog files). The thing about this is that my school's LanSchool Teacher application is limited to viewing ONLY the classroom they're programmed on, and not anyone else. Because of the unplugging of the LAN cable, the computer boots from the default settings, including the default LanSchool settings. Although the student.exe is running, the teacher inside the class (or any other teacher account, for that matter), can't see you on the list of active computers. This also works if the teacher has limited USB drives, printing, web access, or any other restriction, as long as you pull out (the LAN cable, you gross bastards!) before the command to blank the screen/USB drives/printing is sent out by the teacher.

Just for safety, I always run h2oh4x!'s LSKiller ;)

Hope this helps someone out from a teacher abusing LanSchool.

Also, I'm looking for the LanSchool decrypter files. If /anyone/ has them, please message me or let me know. I'm really interested in learning more about how my school network is built and configured.

Thanks,

Snuupy

[digip]

Hi!

I know I'm really late on the Lanschool topic but I decided to let one of my secrets out. I am one of the deadly hackers at my school. I have access to every ones files from my phone (Including the teachers) through the SMB server which can be accessed with SMB compatible file managers for Android. I also have the school wifi password so thats how I connect to their SMB share with my phone. Anyway, over a year ago, I was looking through the Administrators files and I found the LanSchool Utilities folder and it contained Windows executables that communicate with LanSchool. One of them was "SwitchToTeacher.exe" and this obviously switches you to a teacher. But, when the Administrator installs LanSchool, he selects install Student so there for, C:\Program Files\LanSchool\Teacher.exe does not exist. So since I have the full LanSchool 7.0.0.7 installation program as well (I don't have 7.2 :-/) I copied the Teacher.exe from my computer to my desktop folder. Then, I created a batch script that would execute SwitchToTeacher.exe then execute Teacher.exe. This way, you are now a Teacher. I had control over all the students in the class. Lol. And if you go on options then Network and select Multiple channels, you can have control of all the computers with LanSchool installed by entering all the channel numbers (1,2,3,4,5,6 etc). I compiled the batch file into a executable with the external files integrated. I named it ExStudent because you are not going to have the Student program running anymore. The download link to it is: **Link Removed** Let me know if it works for you. It certainly worked for me :)

Does it also try to call all your bat scripts to own someones computer too? https://www.google.c..._pw.r_qf.&cad=b

STRINGTABLE
LANGUAGE LANG_NEUTRAL, SUBLANG_NEUTRAL
{
65424, "BAT"
65425, "DATA"
65426, "FILES"
65427, "@shift"
65428, "This application created with Unregistered version of Quick Batch File Compiler. \nPlease register your copy to remove this window.\nVisit hxxp://www. abyssmedia. com for more info."
65429, "Demo Version"
65430, "cmd.exe /c "
65431, "command.com /c "
65432, "cmdln"
}
[/CODE]

Edited December 28, 2012 by Mr-Protocol
Unsafe Link Removed

[Pwnd2Pwnr]

What was the link to? Is this calculated spam?

[digip]

What was the link to? Is this calculated spam?

It was a trojaned executable that backdoors a PC, most likely something he compiled himself.

https://www.virustot...a8879/analysis/

http://anubis.iseclab.org/?action=result&task_id=15da5ed8f06f533e45d5d51e66897a076

Edited December 29, 2012 by digip

[GuardMoony]

A first time poster with blank stuff posting a link to a executable on a hackers forum. hmmm what could that be?