Command.com

Discuss it here

Command.com

Postby TJ_2k7 » Wed Sep 26, 2007 3:26 pm

In my school we have access to run! :twisted:
by reading this forum i understand alot of rm networks do not,
if i type cmd , it comes up but says;
This has been disable by your newtork administrator :evil:
Image
press any key to continue......
when you click a key it closes!
when i type command.com instead in run
in the commmad prompt comes up fully functioning it says; :)
n:\
and most of the commands i know dont work and are disabled? :(
Do you know any that may work...? :?:

EDIT: After further investigation i found out that when i type a command in command.com it actually says the whole thing is disabled and not that particuler command! opps :lol:
Last edited by TJ_2k7 on Wed Oct 03, 2007 4:09 pm, edited 1 time in total.
User avatar
TJ_2k7
Power Member
 
Posts: 878
Joined: Wed Jul 04, 2007 5:31 pm
Location: LocalHost aka Wales!

Advertisement

Re: Command.com

Postby jd2kuk » Wed Sep 26, 2007 6:35 pm

Wow, nice find :D That's one heck of a vunerability...

And unfortunately the fact that they're still vanilla machines won't make a difference; the teacher and admin drives are locked down by permissions, not by RM software, so accessing them would be like accessing a locked drive on any other domain
jd2kuk
 
Posts: 1541
Joined: Thu Mar 15, 2007 11:19 pm
Location: UK

Re: Command.com

Postby TJ_2k7 » Thu Sep 27, 2007 5:50 pm

Shame about the teacher drives..
A Boring tech class can go a long waY lol :lol:
I have a tech lesson 2morrow so i will try out some other commands and then report back. :!:
TJ!
User avatar
TJ_2k7
Power Member
 
Posts: 878
Joined: Wed Jul 04, 2007 5:31 pm
Location: LocalHost aka Wales!

.......

Postby TJ_2k7 » Fri Sep 28, 2007 6:44 pm

I wrote:Shame about the teacher drives..
A Boring tech class can go a long waY lol :lol:
I have a tech lesson 2morrow so i will try out some other commands and then report back. :!:
TJ!


I tried cd c:\ - no luck! :x
also net user was disabled :evil:
not even the help command worked! :shock:
didnt try ping but its no help to me
there must be some that do ?? :?: :?: :?: :?:

EDIT: Also using a Method i posted a while back i found all the teachers profile files so i know all there user names. i found a few profiles called teacher 1,teacher 2 etc.I tried the password as password and teacher. Any other ideas??
User avatar
TJ_2k7
Power Member
 
Posts: 878
Joined: Wed Jul 04, 2007 5:31 pm
Location: LocalHost aka Wales!

Re: Command.com

Postby tomh12345 » Sat Oct 06, 2007 7:50 pm

We're allowed to access control pannel and run in our user accounts at school, including cmd with no restriction im aware of,
if i hover over the little man in the corner it says 'advanced user' is this a big vulnrebility? what main commands are there for the command prompt?

thanks
tomh12345
 
Posts: 6
Joined: Mon Apr 02, 2007 5:52 pm

Re: Command.com

Postby jd2kuk » Sat Oct 06, 2007 7:56 pm

Advanced users get to use the command prompt (And access the C drive through it!) and also run macros in office, so it is a vulnerability, but not a huge network-crippling one.

Still, makes it easier for students to take advantage of the added permissions :P
jd2kuk
 
Posts: 1541
Joined: Thu Mar 15, 2007 11:19 pm
Location: UK


Return to RM Community Connect

Who is online

Users browsing this forum: No registered users and 2 guests


  • Advertisement