brev Posted August 29, 2010 Share Posted August 29, 2010 Okay fellow hackers here is a challenge for you guys and gals. My school has this really old gateway desktops just like these two http://seilerwerks.files.wordpress.com/2008/03/towers.jpg The goal of this challenge is to get logged on to the local admin account. You can do this either with a cd or flashdrive. These computers are running xp and the users are set up to log onto network accounts, of course. One of the problems that I run into is running a program after I log in. I DO NOT want to run a program that requires me to log in first because then the IT people can see and have a history of everything that I run and do. The second problem is the computers have bios passwords. The last problem is I cant get inside the cases of the computers,unplug them, ect. I am only able to put in a cd or usd drive. So the challenge is: how do I get logged in to the local computer admin account without being able to change boot order, or login to run a program? Winner gets a cookie!! Quote Link to comment Share on other sites More sharing options...
Sparda Posted August 29, 2010 Share Posted August 29, 2010 Ask an admin for the local admin password. Quote Link to comment Share on other sites More sharing options...
misfitsman805 Posted August 29, 2010 Share Posted August 29, 2010 something smells fishy here :P Quote Link to comment Share on other sites More sharing options...
brev Posted August 29, 2010 Author Share Posted August 29, 2010 (edited) Okay fellow hackers here is a challenge for you guys and gals. My school has this really old gateway desktops just like these two http://seilerwerks.files.wordpress.com/2008/03/towers.jpg The goal of this challenge is to get logged on to the local admin account. You can do this either with a cd or flashdrive. These computers are running xp and the users are set up to log onto network accounts, of course. One of the problems that I run into is running a program after I log in. I DO NOT want to run a program that requires me to log in first because then the IT people can see and have a history of everything that I run and do. The second problem is the computers have bios passwords. The last problem is I cant get inside the cases of the computers,unplug them, ect. I am only able to put in a cd or usd drive. So the challenge is: how do I get logged in to the local computer admin account without being able to change boot order, or login to run a program? Winner gets a cookie!! Ya, thanks :) but seriously do you have any ideas? It is really just to get on facebook but long story short there is no chance of a proxy Edited August 29, 2010 by brev Quote Link to comment Share on other sites More sharing options...
Sparda Posted August 29, 2010 Share Posted August 29, 2010 Did you try asking an admin for he password already? Quote Link to comment Share on other sites More sharing options...
Netshroud Posted August 29, 2010 Share Posted August 29, 2010 Be had a similar set-up at my school, but F8 or F12 brought up the boot menu screen (depending on the machine). If your school network is locked down like mine was, you won't be able to access Facebook without a proxy no matter how hard you try. I like Sparda's idea better, though. Quote Link to comment Share on other sites More sharing options...
eovnu87435ds Posted August 29, 2010 Share Posted August 29, 2010 Isnt gaining unauthorized access to a school computer a federal crime? Only way I can think of doing it without having that on your record would be to ask for an admin password Quote Link to comment Share on other sites More sharing options...
iisjman07 Posted August 29, 2010 Share Posted August 29, 2010 (edited) I've been fiddling around with my schools network for a long time, and the easiest way I've found is to befriend an IT teacher (they usually have admin/better privileges than you), and I got mine to give me his moodle password which was the same as his user password. The other way was that all machines are locked down with active directory like all corporate networks should, but I found one machine had issues with this and was far more lenient than the others, for example allowing an executable to run if it was named 'explorer.exe', from which I managed to enable command prompt, and from there you can access everything.... If you're serious about this then post more details on how the machines are locked down using EDIT: it's worth trying backdoor bios passwords, because if you could boot from cd/usb then the machine doesn't stand a chance. Try googling for some Edited August 29, 2010 by iisjman07 Quote Link to comment Share on other sites More sharing options...
Netshroud Posted August 29, 2010 Share Posted August 29, 2010 (edited) EDIT: it's worth trying backdoor bios passwords, because if you could boot from cd/usb then the machine doesn't stand a chance. Try googling for some I forgot the name of the program we used, but we actually cracked the BIOS password. It required local administrator privileges in the first place, though. Don't you love recursive infinite loops? Edited August 29, 2010 by Psychosis Quote Link to comment Share on other sites More sharing options...
iisjman07 Posted August 30, 2010 Share Posted August 30, 2010 (edited) I've cracked a password with !BIOS, which worked for my machine - http://www.technibble.com/downloads/misc/BIOS320.EXE Edited August 30, 2010 by iisjman07 Quote Link to comment Share on other sites More sharing options...
Alias Posted August 31, 2010 Share Posted August 31, 2010 First of all, this smells incredibly fishy as stated above. Second of all, instead of asking us why don't you go and learn how todo it yourself. Third, What programs run on the XP machines. For example do they have Microsoft Access from which you can run macros's that can spawn command prompt Windows. Also there was a new exploit released in the past week that can exploit an XP machine with Quicktime on it from a remote location. Quote Link to comment Share on other sites More sharing options...
Infiltrator Posted August 31, 2010 Share Posted August 31, 2010 (edited) I don't know if this is going to work or not, since you don't have access to the BIOS to change the boot order. But its worth a try. Download the live version of OPHcrack and try to crack the admin password with it. If that does not work, try to use ntpassword offline to change the password or reset it if worse come to worse. Or you could use Metasploit to get into the computer, if the computer is connected to a network. Edited August 31, 2010 by Infiltrator Quote Link to comment Share on other sites More sharing options...
Netshroud Posted August 31, 2010 Share Posted August 31, 2010 Considering he's trying to access Facebook, and it's a school computer, I would hazard a guess that it's on a network, Infiltrator. Quote Link to comment Share on other sites More sharing options...
Infiltrator Posted August 31, 2010 Share Posted August 31, 2010 Considering he's trying to access Facebook, and it's a school computer, I would hazard a guess that it's on a network, Infiltrator. I would say that too, I just realized that now. I must have misread his reply. thanks for bringing that up. Quote Link to comment Share on other sites More sharing options...
BattZ Posted August 31, 2010 Share Posted August 31, 2010 Sounds eerily like a ZOMG I N33D tO HaX0r my Ex-Gf's mySPaCE. But I lost faith in people a long time ago. If's it just to access facebook, why not just use a virtual machine on a thumb drive, unless they have a key logger on the machine, or looking at your desktop, they shouldn't be able to know what your doing. If your really paranoid, you could use TOR. Quote Link to comment Share on other sites More sharing options...
Netshroud Posted August 31, 2010 Share Posted August 31, 2010 You need administrator credentials to install the virtual network drivers. Quote Link to comment Share on other sites More sharing options...
Alias Posted September 1, 2010 Share Posted September 1, 2010 The Quicktime metasploit module has hit the servers. Get in quick before they patch it. http://www.metasploit.com/modules/exploit/..._marshaled_punk Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.