Xatrix Security

[an8kid]

Hot of the press!

I found this out today, and it does work.

1. Have a .exe file you want to run (must be .exe only, no extra .dll files or anything.)
eg: Software.exe

2. Rename to .scr
eg: Software.scr

3. Right click > send to compressed folder (zip)
eg: Software.zip

4. Enter zipped folder (dont extract it, just double click it to look inside)

5. Run the program inside.

Why this works:
screensavers (.scr) are just renamed .exe's

[irksome]

This won't work in most establishments. Any system admin with common sense knows to disable all these workarounds for EXEs.

Good find though.

[jd2kuk]

Yeah this workaround can be disabled by Group Policy... so it might work in some places where security is lax.

Have to try it though...

[an8kid]

well you see thats what i thought...
But .exe's are blocked at my school, and so are .scr's but for some reason, it doesn't pay attention if its in a .zip folder.

[jd2kuk]

Weeeird,,,

Still very nice find. I wonder how long it'll take for RM to release a patch...

[TJ_2k7]

AWWW!
This doesn't work at my school!
Our school technician is tight!
All of the exploits i know don't work on my school network!
TJ

[ICT Tech]

Weeeird,,,

Still very nice find. I wonder how long it'll take for RM to release a patch...

Unfortunetely i have some bad news, as it is the start of a new month, we are reviewing ALL of the security policies in our schools across the UK.
The method you have used does work in most schools in the UK, although we found the problem to it in August, we made a change to alot of schools registry editor, we changed an exe restriction for teachers but it managed to leak into pupil accounts, but as we are too lazy to do anything, this method should work in most schools until the start of November, approx.
Sorry

[Fergie1]

Weeeird,,,

Still very nice find. I wonder how long it'll take for RM to release a patch...

Unfortunetely i have some bad news, as it is the start of a new month, we are reviewing ALL of the security policies in our schools across the UK.
The method you have used does work in most schools in the UK, although we found the problem to it in August, we made a change to alot of schools registry editor, we changed an exe restriction for teachers but it managed to leak into pupil accounts, but as we are too lazy to do anything, this method should work in most schools until the start of November, approx.
Sorry

Who's we? As far as I remember you're hacker pro and you go to a school.

[ICT Tech]

ha ha ha NO!!!!!!!!!!!!!!!!!!

[ajohnson256]

duh you guys are fools there is a really easy way to run .exe if you really easily want to run .exe just drag the .exe onto a normal internet explorer page and it will ask you to save it somewhere: c:/windows/media/nameofexe then it will ask you to run it and hey presto simple .exe running.
one doesn't even need admin privilege simple and effective!!