Xatrix Security

[fman]

Ok so at school we are using smart tools 3 and i managed to use Media player exploit to get into my network places... we have 3 server ST3-01 (lower school) and ST3-DC2 (upper school) and also PROXYDSHS (web proxy)..
So i went to ST3-01 and found some files which looked kinda intersting these were EXE files (which we cant run) setup files:
KEY: ---> means FOLDER
- Admin Desktop.exe Admin Desktop.ini

- Logon Utilities.exe Logon Utilities.ini

- RMAUST PACK ---> V1.0.0.0 ----> RMAUST Pack.exe RMAUST pack.ini Write Access.ini README.txt

##########CONTENT OF README.TXT#############
RMAUST Pack

This is an MSI package for file and reg fragments specifice for Smart Tools 3.2 in Australaia.


____________________________________________________________________________
V1.0.0.0 built by Sven Suba

Includes:
* 6 Coloured wallpaper bitmaps for desktops
* Smart Tools banners for logons
* NTUser.dat file for the Default User & RM Default User

____________________________________________________________________________
V1.0.0.1

Includes:
###########################################################
- Wallpaper and logon bitmaps ---> V1.8.0.0 ---> Wallpaper Logon Bitmaps.ini WriteAccess.ini Wallpaper and Logon Bitmaps.exe
WRITEACESS.INI CONTENTS

[%SystemRoot%\Wallpaper1.bmp]
Everyone=0x1200A9
Administrators=0x1200A9

[%SystemRoot%\Wallpaper2.bmp]
Everyone=0x1200A9
Administrators=0x1200A9

[%SystemRoot%\Wallpaper3.bmp]
Everyone=0x1200A9
Administrators=0x1200A9

[%SystemRoot%\Wallpaper4.bmp]
Everyone=0x1200A9
Administrators=0x1200A9

[%SystemRoot%\Wallpaper5.bmp]
Everyone=0x1200A9
Administrators=0x1200A9

[%SystemRoot%\AdminWallpaper.bmp]
Everyone=0x1200A9
Administrators=0x1200A9

[%SystemRoot%\System32\LogonLogo.bmp]
Everyone=0x1200A9
Administrators=0x1200A9

[%SystemRoot%\System32\LogonLogoLarge.bmp]
Everyone=0x1200A9
Administrators=0x1200A9

- Wallpaper and logon bitmaps ---> V1.8.0.0 ---> Windows ---> AdminWallpaper.bmp Wallpaper1.bmp 2.3.4.5etc

Wallpaper1 = Green (Guest)
Wallpaper2 = Yellow (RM Explorer)
Wallpaper3 = Orange (Restricted User)
Wallpaper4 = Blue (Standard User)
Wallpaper5 = Purple (Advanced User)
AdminWallpaper = Red (SystemAdmin)

- Wallpaper and logon bitmaps ---> V1.8.0.0 ---> SYSTEM 32 ---> Logonlogo.bmp

- RM logon provider ---> V1.63.0.0 ---> RM Logon provider.ini RM logon provider.exe

[Package]
Description=RM Logon Provider.
WIPackage=RM Logon Provider.msi
OS=5.WS




[General]
Name=RM Logon Provider
Version=v1.63.0.0

[HFXCC3136]
Install=RM Logon Provider.msi
CommandLine=ALLUSERS=1
Transform=N/A
Upgrade=0
CopyOp=1
MachineType=All Machines
Condition=N/A
Cost=500,RMPackages=500


- RM tutor 2 ---> V1.24.0.0 ---> RM TUTOR 2.exe

[Package]
Description=RM Tutor 2 (v1.24.0.0)
Version=1.24.0.0
OS=5.WS
WIPackage=RM Tutor 2.msi
ImmediateReboot=1



[General]
Name=RM Tutor 2
Version=v1.24.0.0

[RM Tutor 2]
Install=RM Tutor 2.msi
CommandLine=ALLUSERS=1
Transform=N/A
Upgrade=0
CopyOp=1
MachineType=All Machines
Condition=servertype <> "Member"
Cost=14500,RMPackages=14500


[HFXCC3127]
Install=RM Tutor 2.msi
CommandLine=ALLUSERS=1
Transform=N/A
Upgrade=0
CopyOp=1
MachineType=All Machines
Condition=servertype <> "Member"
Cost=14000,RMPackages=14000

[%ProgramFiles%\Research Machines\RM Tutor 2\Controller\teacherlaunch.exe]
Teaching Staff=0x1200A9

- RM tutor 2 ---> V1.24.0.0 ---> Shortcuts ---> RM Tutor 2 ---> RM TUTOR 2 TEACHER (shortcut) vssver.scc

I have more stuff.. but i cant be stuffed listing all of em..
I havnt tried running them, they are on my USB stick right now.
If u want me to upload them then i will.
RM TUTOR 2 was the biggest file with 15 megs.

also is there a way to unblock EXE restrictions?

Tell me wat you think,
FMAN

P.S im going back for more

[jd2kuk]

That looks pretty interesting

Looks like it comes with some default user profiles for particular groups aswell

[ICT Tech]

could you upload them please.

Thanks in advance