Oct 20, 2011 02:21 AM
(This post was last modified: Nov 6, 2012 02:53 PM by dismayed.)
Make sure to post to keep this thread alive! I have put this in beta, more things will be added.
Introduction
Today, I am going to release my tutorial. A lot of schools have blocked C DRIVE from hacking attempts to the school systems/machines. There are many ways to access the drive. Including CMD, Firefox/Google Chrome etc. Please follow all your local laws. Read their Legal. And do not I REPEAT DO NOT DELETE ANY SYSTEM FILES FROM ANY EDUCATIONAL COMPUTERS, IT WILL END BADLY!
Ok that is all over and done with, now for the tutorial.
Ok that is all over and done with, now for the tutorial.
Firefox/Google Chrome
Open Firefox or Google Chrome and type the following in the URL;
This will not allow you to open the files, but download them. In other words, you need the whole folder to work a .exe file (Unless it is a self ran .EXE or a text file)
This method is useful for trying to search a file and open the file with CMD.
Quote:C:\
This will not allow you to open the files, but download them. In other words, you need the whole folder to work a .exe file (Unless it is a self ran .EXE or a text file)
This method is useful for trying to search a file and open the file with CMD.
Command Prompt
Windows Vista And Any Older Versions: You can read my guide here https://hackforums.net/showthread.php?tid=1340139
Windows 7 (THANKS TO W0lfbane): Read the above tutorial but instead of "command.com" put in the following;
To browse through the C Drive, type in the following;
And if you want to open a file, type in the following for the example;
Windows 7 (THANKS TO W0lfbane): Read the above tutorial but instead of "command.com" put in the following;
Quote:@echo off
title CMD
:1
set /p a=%cd%^>
%a%
goto :1
To browse through the C Drive, type in the following;
Quote:C:
And if you want to open a file, type in the following for the example;
Quote:start C:\Windows\cmd.exe
Bypassing Administrator Password (Kon-Boot)
Please read the following https://hackforums.net/showthread.php?ti...dows+login
Bypassing Administrator Password: Only Windows XP
You will need a LAN cored for this Bypass. If your school/work is connected to wireless. You can not do this.
What a LAN Cored looks like
[img]http://www.hailink.net/uploadfiles/CALAN-BL-XX_Lan_cable_01.jpg[/img]
When you are connected to a network. You can access full Administrator rights by doing the following steps;
1. Reboot system.
2. Find where the LAN/Local cored is located.
3. Login, when it says "Applying User Settings" take out the LAN cored as quickly as you can.
4. Wait till it logs in, when you are on your desktop. Put the LAN cored back in to access the Internet.
What a LAN Cored looks like
[img]http://www.hailink.net/uploadfiles/CALAN-BL-XX_Lan_cable_01.jpg[/img]
When you are connected to a network. You can access full Administrator rights by doing the following steps;
1. Reboot system.
2. Find where the LAN/Local cored is located.
3. Login, when it says "Applying User Settings" take out the LAN cored as quickly as you can.
4. Wait till it logs in, when you are on your desktop. Put the LAN cored back in to access the Internet.
Keylogging And Social Engineering
It often requires no techy knowledge to instigate, but the more you have, the better. For example, leave a USB stick beside the teacher's computer in the computer-room/library/classroom, with an Autorun keylogger. Tell the teacher that the USB is yours. S/He should plug it into their PC and prove it is yours.
Linux Bootable USB
(Thanks To KlokWeiss)
This method of getting a live install to a USB drive is the simplest available using Unetbootin. Note that we will format the USB drive and erase its contents.
1. Plug in your USB Drive (Minimum USB Drive capacity 2 GB)
2. Format the USB drive to FAT32
3. Download Unetbootin from http://unetbootin.sourceforge.net/
4. Start Unetbootin and select diskimage (use the backtrack-final ISO)
5. Change the boot startup to USB via BIOS.
6. Log into BackTrack with the default username and password root / toor.
This method of getting a live install to a USB drive is the simplest available using Unetbootin. Note that we will format the USB drive and erase its contents.
1. Plug in your USB Drive (Minimum USB Drive capacity 2 GB)
2. Format the USB drive to FAT32
3. Download Unetbootin from http://unetbootin.sourceforge.net/
4. Start Unetbootin and select diskimage (use the backtrack-final ISO)
5. Change the boot startup to USB via BIOS.
6. Log into BackTrack with the default username and password root / toor.
WinPE or Windows Preinstalled Environment
Wikipedia: "Windows Preinstallation Environment (aka Windows PE, WinPE) is a lightweight version of Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 R2 or Windows 8 that is used for the deployment of workstations and servers."
Needless to say, at my school it is fully unencrypted or unhidden. This can give you FULL computer administrator access. (Doesn't include Network administrator)
By doing a simple glitch it, that can bypass the firewall that causes the computer to restart.
But not all the computers have this, well at my school anyways.
I figured out that only the HPs had WinPE. How can you find out?
By restarting your computer, a black screen might appear that says it wants you to wait 10 seconds before it boots up.
By pressing "F8" it should show the option WinPE, highlight this and press enter.
This should load up vista, then several Command Prompts will show. When it says "Verifying Connect" like the "Bypassing Administrator Password: Only Windows XP" you need to take the LAN cord out. Then press control+c. Then type "Dir C:"
Now you have full access, I recommend to type in "ipconfig/release" before putting the LAN back in.
Needless to say, at my school it is fully unencrypted or unhidden. This can give you FULL computer administrator access. (Doesn't include Network administrator)
By doing a simple glitch it, that can bypass the firewall that causes the computer to restart.
But not all the computers have this, well at my school anyways.
I figured out that only the HPs had WinPE. How can you find out?
By restarting your computer, a black screen might appear that says it wants you to wait 10 seconds before it boots up.
By pressing "F8" it should show the option WinPE, highlight this and press enter.
This should load up vista, then several Command Prompts will show. When it says "Verifying Connect" like the "Bypassing Administrator Password: Only Windows XP" you need to take the LAN cord out. Then press control+c. Then type "Dir C:"
Now you have full access, I recommend to type in "ipconfig/release" before putting the LAN back in.
End
There are countless ways to access the School/Work Place System to gain control to the C:\ Drive. Hope you learned a lot reading this thread.
Please do not leach this thread without my permission. It's just a PM away.
Please do not leach this thread without my permission. It's just a PM away.



