[David Tennant]

Thanks man, will definitely be using this in the near future!

No problem, glad I could help! :Blackhat:

[thereisnospoon]

Haha sweet tutorial. Wish I was still in high school I would mess around with this information. Thanks!

[gizmoguy]

this has been posted before lol good job tho i guess

[David Tennant]

this has been posted before lol good job tho i guess

I've seen a lot of versions of it, so I compiled the best of the best into one guide. I think mine is better formatted and worded, too.

[iNuke]

I tried, I unlocked CMD and everything, I can also see the different groups.

Now the thing is, when I try this command:
net user NameYourAccount /add

They're telling me: SYSTEM ERROR 5. ACCESS DENIED.

I can do everything else, but no this command. Why?

[TheEmpathy]

Good Job man keep it up ! A very nice tut

[Calla]

Nice tut. I probably won't get past my digital tech teacher though!

[David Tennant]

Nice tut. I probably won't get past my digital tech teacher though!

They're pretty fool-proof methods for most school boards, and no one has to know you've done it/them.

[xMoD]

Uhhh, for net user you have to be admin.
Plus every school I have been to that cmd unblock method doesnt work.
But I made one myself, (By that I mean I never have seen it before, and I wrote it up myself, without much help)
Here is the source, which if I am the first to write this, then thats epic :D[small](Doubt it)[/small]

Code

set un=%USERNAME%
set dl=%cd:~0,3%
set test=%cd%

cls
@echo off
echo Grabbing Info
timeout /t 1 >>nul
echo Drive: %dl%
echo Current Directory: %test%

:loop
set /p exec=%test%^>
%exec%
set test=%cd%
goto loop
pause >nul

(May give small warning, about UNC paths, just ignore it, it still works 100% (Network paths, dont you hate em?)
I have made a Ultimate one, with some cool built in commands for easy access (Like typing in *1 for example, to use the ipconfig /all command)
But this is just the next to Minimal one.
Also, Im not very good with batch, so excuse the mess.

---

You could also do that in 4-5 lines, but thats without the Current Directory display, and username and such.

---

(Please read the introduction, I worked hard on it and it will help introduce you to the concept of hacking school computers)

Hey HackForums!

I've recently been on the Beginner Hacking section a lot and I've noticed that there are a lot(and I mean a lot) of posts asking how to hack into school computers.
Well, stop posting those posts there because I'm going to tell you how to do it!

First off, I want to clarify that this method is for educational purposes only and I don't take any responsibility for your actions.

To get started, allow me to explain the three different types of admin privileges.
We've got:

Local admin privileges,

Network admin privileges,

Server admin privileges.

Gaining local admin access is very easy, and I will teach you how to do this in this tutorial.

Gaining network admin access is slightly harder and can be done from the computer you used to gain local admin access.

Lastly, to gain server admin access, you need network admin access but you need to a bit of keylogging. Nothing massive and it's still fairly easy.

Now that I've finished my introduction, let's get to the actual hacking part.
I've got three methods for gaining admin on school computers. Try method one first, if that doesn't work you have to do either method two or method three to get method one to work.

Method one
What you will need:
Command Promt(cmd) to be unblocked.

Alright. This one is the easiest, the problem though, is that usually, cmd is blocked. If cmd isn't blocked, awesome. Just do these simple steps!
Step 1. Open cmd. There are two ways to do this. Number one is to press (Windows key) and the "R" key at the same time and type "cmd". The second way is to create a new text file, write inside it:

Code

@echo off
command
pause

and save it as "something.bat" without the quotations.

Step 2.
Once you're in cmd, type:

Code

net user *NameYourAccount* /add

Remember to remove the stars.
What this does is creates a new local account. Remember this name because we're going to use it later. The name can be anything.

Step 3.
Now, once you've completed the last step, write:

Code

net localgroup

What this does is allows you to see the different usergroups on that machine.
Find the name of the admin group. It's usually "Administrators", but it could be different.
Once you've found it, type this(assuming that the group is "Administrators"):

Code

net localgroup Administrators *ThatAccountYouMade* /add

remember again to remove the stars and to use the account you just created.

Congrats! You've gained local admin access! Most of the time though, cmd is not accessible. Read methods two and three to learn how to make it accessible!

Method two(Used to unlock cmd so you can use method one)
What you will need:
A disk you can write to
Ophcrack. You can download Ophcrack here: http://ophcrack.sourceforge.net/download...ype=livecd

What Ophcrack does is it searches through your computer for passwords. 90% percent of the time, in my experience, it will recover an admin password and you can use that to log on and make yourself an admin.

So first things first, burn the Ophcrack iso to a disk. Make sure that you download the correct Ophcrack version, as they are different for different versions of Windows.
Once you've burned Ophcrack onto a disk, insert it into your school computer, turn it off and go into the bios. Boot from the disk.
It's pretty simple from there, you'll be able to figure it out.

If this doesn't work, however, try the next method. The third method always works.

Method three
What you will need:

Yet another disk that you can burn things onto
Backtrack 5(Yes, I know there are better things to use but I have experience with BT5.) You can download BT5 here: http://www.backtrack-linux.org/downloads/

So you have to burn BT5 to your disk, simple enough. After you're done burning we can continue.

Like Ophcrack, you have to boot from the CD. Once you're booted, you'll see a console type menu. Here are the commands you have to type:

Code

fdisk -l

Look for the biggest Windows partition. It's usually called "dev/sda2" but it can be different for you.
Now, type:

Code

mkdir /mnt/xp
mount /dev/sda2 /mnt/xp
cd /mnt/xp

Now you're inside the Windows partition without any restrictions. Now here's where it gets tricky. Don't screw this up, ok?
To get into the root of your partition, type this:

Code

cd WINDOWS/system32

We have to remove something called sethc.exe. To do this we type:

Code

rm sethc.exe

Once you've done that type this:

Code

cp cmd.exe sethc.exe

What this does is copies cmd.exe under the name "sethc.exe". Awesome.

Now that you've done all this, shut down your computer and remove the BT5 disk. Boot up the computer normally until you're in the main Windows screen. Press the SHIFT key 5 times and cmd will appear, this is an unrestricted cmd. Now go back to method one and do that in your new cmd.


Congratulations, you've successfully hacked into your school computer to gain local admin access.

If you guys want to know how to gain Network and Server access, let me know in the comments and I'll put together a tutorial for it.

This was my first tutorial, so it's probably terrible, please feel free to let me know in the comments.

Thanks for reading and I hope you've learned something.

-David 🤝

I like the Sticky Keys Method, I did this to my old Laptop, in case I forgot my Password.
Anyways though, do you have a way I can boot to the USB/CD?
I have tried to get into the Bios, but it asked for a pass ;3
No luck with Password password or blank ;3.
Anyways, maybe some way I could be able to replace sethc.exe with cmd.exe without booting?

Again I cant boot to ophcrack either :/

But one thing, is there a way I can get the Hashes for the password some other way, then bring them home and crack with ophcrack?

---

Please PM me for reply, I dont want to miss anything you have to help me with.

[ars2012]

If anyone has LanSchool, its a program where the teacher can control your screen and watch anyone's screen and make everyone watch there screen. If you need a hack, basically I can get YOU to become the teacher just PM me.

[Mesmaroth]

Im sure there is a Microsoft Word in school computers. Just save as plain text, In the desktop then go to that file and then type the code and save as a bat file.

[Esef]

nnnniiccee tutorial, used to play around with cmd now i know what to do in it.

[idfk]

Mind telling us where to get something to access the full BIOS
What my school does, is it's password lock and i just double enter, and i get limited settings...
So any programs to get the password? or let me have full access to bios?
Thanks in Advanced :)

[David Tennant]

Im sure there is a Microsoft Word in school computers. Just save as plain text, In the desktop then go to that file and then type the code and save as a bat file.

Late reply, but sometimes .batch access is restricted, meaning you can't use .bat files.

[Private Network]

Lol i would use this if my school would care about the PC's...
The student User got admin...