Oct 6, 2013 11:43 AM
(This post was last modified: Oct 6, 2013 12:27 PM by David Tennant.)
(Please read the introduction, I worked hard on it and it will help introduce you to the concept of hacking school computers)
Hey HackForums!
I've recently been on the Beginner Hacking section a lot and I've noticed that there are a lot(and I mean a lot) of posts asking how to hack into school computers.
Well, stop posting those posts there because I'm going to tell you how to do it!
First off, I want to clarify that this method is for educational purposes only and I don't take any responsibility for your actions.
To get started, allow me to explain the three different types of admin privileges.
We've got:
Local admin privileges,
Network admin privileges,
Server admin privileges.
Gaining local admin access is very easy, and I will teach you how to do this in this tutorial.
Gaining network admin access is slightly harder and can be done from the computer you used to gain local admin access.
Lastly, to gain server admin access, you need network admin access but you need to a bit of keylogging. Nothing massive and it's still fairly easy.
Now that I've finished my introduction, let's get to the actual hacking part.
I've got three methods for gaining admin on school computers. Try method one first, if that doesn't work you have to do either method two or method three to get method one to work.
Method one
What you will need:
Command Promt(cmd) to be unblocked.
Alright. This one is the easiest, the problem though, is that usually, cmd is blocked. If cmd isn't blocked, awesome. Just do these simple steps!
Step 1. Open cmd. There are two ways to do this. Number one is to press (Windows key) and the "R" key at the same time and type "cmd". The second way is to create a new text file, write inside it:
and save it as "something.bat" without the quotations.
Step 2.
Once you're in cmd, type: Remember to remove the stars.
What this does is creates a new local account. Remember this name because we're going to use it later. The name can be anything.
Step 3.
Now, once you've completed the last step, write:
What this does is allows you to see the different usergroups on that machine.
Find the name of the admin group. It's usually "Administrators", but it could be different.
Once you've found it, type this(assuming that the group is "Administrators"):
remember again to remove the stars and to use the account you just created.
Congrats! You've gained local admin access! Most of the time though, cmd is not accessible. Read methods two and three to learn how to make it accessible!
Method two(Used to unlock cmd so you can use method one)
What you will need:
A disk you can write to
Ophcrack. You can download Ophcrack here: http://ophcrack.sourceforge.net/download...ype=livecd
What Ophcrack does is it searches through your computer for passwords. 90% percent of the time, in my experience, it will recover an admin password and you can use that to log on and make yourself an admin.
So first things first, burn the Ophcrack iso to a disk. Make sure that you download the correct Ophcrack version, as they are different for different versions of Windows.
Once you've burned Ophcrack onto a disk, insert it into your school computer, turn it off and go into the bios. Boot from the disk.
It's pretty simple from there, you'll be able to figure it out.
If this doesn't work, however, try the next method. The third method always works.
Method three
What you will need:
Yet another disk that you can burn things onto
Backtrack 5(Yes, I know there are better things to use but I have experience with BT5.) You can download BT5 here: http://www.backtrack-linux.org/downloads/
So you have to burn BT5 to your disk, simple enough. After you're done burning we can continue.
Like Ophcrack, you have to boot from the CD. Once you're booted, you'll see a console type menu. Here are the commands you have to type:
Look for the biggest Windows partition. It's usually called "dev/sda2" but it can be different for you.
Now, type:
Now you're inside the Windows partition without any restrictions. Now here's where it gets tricky. Don't screw this up, ok?
To get into the root of your partition, type this:We have to remove something called sethc.exe. To do this we type:
Once you've done that type this: What this does is copies cmd.exe under the name "sethc.exe". Awesome.
Now that you've done all this, shut down your computer and remove the BT5 disk. Boot up the computer normally until you're in the main Windows screen. Press the SHIFT key 5 times and cmd will appear, this is an unrestricted cmd. Now go back to method one and do that in your new cmd.
Congratulations, you've successfully hacked into your school computer to gain local admin access.
If you guys want to know how to gain Network and Server access, let me know in the comments and I'll put together a tutorial for it.
This was my first tutorial, so it's probably terrible, please feel free to let me know in the comments.
Thanks for reading and I hope you've learned something.
-David 🤝
Hey HackForums!
I've recently been on the Beginner Hacking section a lot and I've noticed that there are a lot(and I mean a lot) of posts asking how to hack into school computers.
Well, stop posting those posts there because I'm going to tell you how to do it!
First off, I want to clarify that this method is for educational purposes only and I don't take any responsibility for your actions.
To get started, allow me to explain the three different types of admin privileges.
We've got:
Local admin privileges,
Network admin privileges,
Server admin privileges.
Gaining local admin access is very easy, and I will teach you how to do this in this tutorial.
Gaining network admin access is slightly harder and can be done from the computer you used to gain local admin access.
Lastly, to gain server admin access, you need network admin access but you need to a bit of keylogging. Nothing massive and it's still fairly easy.
Now that I've finished my introduction, let's get to the actual hacking part.
I've got three methods for gaining admin on school computers. Try method one first, if that doesn't work you have to do either method two or method three to get method one to work.
Method one
What you will need:
Command Promt(cmd) to be unblocked.
Alright. This one is the easiest, the problem though, is that usually, cmd is blocked. If cmd isn't blocked, awesome. Just do these simple steps!
Step 1. Open cmd. There are two ways to do this. Number one is to press (Windows key) and the "R" key at the same time and type "cmd". The second way is to create a new text file, write inside it:
Code
@echo off
command
pauseand save it as "something.bat" without the quotations.
Step 2.
Once you're in cmd, type:
Code
net user *NameYourAccount* /addWhat this does is creates a new local account. Remember this name because we're going to use it later. The name can be anything.
Step 3.
Now, once you've completed the last step, write:
Code
net localgroupWhat this does is allows you to see the different usergroups on that machine.
Find the name of the admin group. It's usually "Administrators", but it could be different.
Once you've found it, type this(assuming that the group is "Administrators"):
Code
net localgroup Administrators *ThatAccountYouMade* /addCongrats! You've gained local admin access! Most of the time though, cmd is not accessible. Read methods two and three to learn how to make it accessible!
Method two(Used to unlock cmd so you can use method one)
What you will need:
A disk you can write to
Ophcrack. You can download Ophcrack here: http://ophcrack.sourceforge.net/download...ype=livecd
What Ophcrack does is it searches through your computer for passwords. 90% percent of the time, in my experience, it will recover an admin password and you can use that to log on and make yourself an admin.
So first things first, burn the Ophcrack iso to a disk. Make sure that you download the correct Ophcrack version, as they are different for different versions of Windows.
Once you've burned Ophcrack onto a disk, insert it into your school computer, turn it off and go into the bios. Boot from the disk.
It's pretty simple from there, you'll be able to figure it out.
If this doesn't work, however, try the next method. The third method always works.
Method three
What you will need:
Yet another disk that you can burn things onto
Backtrack 5(Yes, I know there are better things to use but I have experience with BT5.) You can download BT5 here: http://www.backtrack-linux.org/downloads/
So you have to burn BT5 to your disk, simple enough. After you're done burning we can continue.
Like Ophcrack, you have to boot from the CD. Once you're booted, you'll see a console type menu. Here are the commands you have to type:
Code
fdisk -lNow, type:
Code
mkdir /mnt/xp
mount /dev/sda2 /mnt/xp
cd /mnt/xpNow you're inside the Windows partition without any restrictions. Now here's where it gets tricky. Don't screw this up, ok?
To get into the root of your partition, type this:
Code
cd WINDOWS/system32Code
rm sethc.exeCode
cp cmd.exe sethc.exeNow that you've done all this, shut down your computer and remove the BT5 disk. Boot up the computer normally until you're in the main Windows screen. Press the SHIFT key 5 times and cmd will appear, this is an unrestricted cmd. Now go back to method one and do that in your new cmd.
Congratulations, you've successfully hacked into your school computer to gain local admin access.
If you guys want to know how to gain Network and Server access, let me know in the comments and I'll put together a tutorial for it.
This was my first tutorial, so it's probably terrible, please feel free to let me know in the comments.
Thanks for reading and I hope you've learned something.
-David 🤝



