+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: **--Intranet 0day exploit remotely! --** (/showthread.php?tid=1311477)
**--Intranet 0day exploit remotely! --** - CyberM@X - May 22, 2011
0day exploit - remotely
Here is a little story of what I experienced in my spare time at school .. Enjoy🤝
This story is is based on: File execution & 0day exploitation remotely from intranet!
Code
Well it all started up at my school, and I wanted to getting access for the teacher computer, and I was like ... what can I mess with here.
So I was thinking, if I could crack that md5 hash of that computer to gain administrator access then I would be able to execute commands remotely from the intranet. 🤗
So I began with using ophcrack at a local machine, and found the password for the local administrator network.. right. I exploited the password of the administator, what now.
Well what I did next was to go at the teacher computer and start login as administrator. It succeed when I logged in, and I was like ... umm let me try this password and username on other computers... WOW! I was chocked... the security was = 0 .. The passwords all above the whole school were the same. This password was also used for BIOS editing!!🎉
Well I messed around creating a backdoor from the teacher's computers ( I have to say in each classroom we do have an admin computer which only the teachers "should" be allowed to access... But I was able to access them as well and create my self a super user to execute these commands.
I was curious and did thinking of .. hmmm if the teacher was on the computer & the studens were working at same local intranet, well then I should be able to have access for the computer as well... So I had!! - I just went to the CMD and promted in "Net view" ( this was to exploit the vulnerabillities of what I could access at!)
So I was typing in a few net commands to gain access for $IPC / $ADMIN and as well files at the computer the teacher was working on...
when I looked into one of the files, then I did go to probities and viewed the permissions at the teachers computer ( so I'm running from an XP box to and XP box, and viewing the permissions ) - By here I could go at advanced and add my self to the domain for having my user to access the teachers computer I did like added EFIF\user and hit ok.. afterwards I did go at the teachers computer for curiosity while he was afway, I sneaked over and logged into my account and was supricing how this was easy done! - since usually the normal users cannot access the teacher computer without having an super-user account.Hope you like my story, throw a comment, and tell me what you think..👍
lol 50 views no comments ... dissapointing ! :( ..
[/hr]
Did anyone found this interesting ?
* - Frostbite™ - Jul 14, 2011
Very interesting, going to try some of these methods on my school. Dont know why noone commented. Thankyou
* - CyberM@X - Jul 14, 2011
Well thank you for showing some kind of interest in my thread :)! - nice to see some activity finally !..
BUMP!
* - Toaster - Jul 14, 2011
Nice thread man, I found this interesting.
* - Big Baller Shot Caller - Jul 14, 2011
It was pretty interesting. What up with the title, I don't get the "0 day"
* - Jarien - Jul 14, 2011
Nice story, maybe not so similar to mine:
My school has a website, where other students can see it's grade by login in, so I found an exploit that I was able to upload a shell from some place, and I did upload a password-protected one, so I had access to the whole website, I even managed the database of the website, but couldn't download the database file which has everything, because it's being used by other process, but I still was able to control everything, but I didn't do anything bad, I closed the exploit, and protected the website by myself, but I still had access to everything, I wanted to tell my teacher about this, but I was scared that he could think, that I hacked the school website grade system, without even thinking of I'am doing something good but I didn't tell him to the moment yet. It would be cool if someone can help me to download that file :P
Thanks,
PS: Nice story bro :)
* - Hentai - Jul 14, 2011
very nice lol should install rat from backdoor and mess with everyones computers 😏
* - ๖ۣۜÑåzgйŀ - Jul 14, 2011
Yea I tried this also 😉
And now its summer and my Rat is still on the computers😁
Thats what the school gets for using mcafee..😑
* - CyberM@X - Jul 15, 2011
Yeah well school security is = Zero ! ...
Security ... What security ?? ... Security is an illusion!
Thanks for all the comments on my own exploit :)!
I'm working on how to crack a harddrive password ATM, since I got a new IBM + DELL computer for free, and thoese are both password protected.. and I can't boot up on backtrack for cracking the password or even Ophcrack... nothing can boot without the password :(!.. if you got any ideas of how to bypass this then please answer me through PM!.
Kindly regards,