Xatrix Security

[Xcellerator]

I've started this topic as a way to discover more short cuts which can be around RM. Short cuts are one of the few things that aren't blocked (most of the time any way )
Invisible on the Network: net stop client32 (already known by most no credits to me...)
User Type Indicator: reg add HKCU\Software\Policies\Research Machines\Network Management\UserTypeIndicator /v Icon /d dword:4
reg add HKCU\Software\Policies\Research Machines\Network Management\UserTypeIndicator /v InfoTip /d System Administrator
Allow CMD: reg add HKCU\Software\Policies\Microsoft\Windows\System /v DisableCMD

YOU MAY HAVE TO LOG OFF AND BACK ON IN ORDER FOR THE CHANGES TO TAKE EFFECT!!!!!

Also below are the contents of the Reg File for RM CC2 from the Black Sun Research Centre RM Hacking Article, any one who can help in turning these links into short cuts are heavily appreciated, if anyone know any more please post with them.

[HKEY_LOCAL_MACHINE\Software\ResearchMachines\NOATTRIB.VXD]
"loadvxd"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDrives"=dword:00000000
"LinkResolveIgnoreLinkInfo"=dword:00000000
"NoFolderOptions"=dword:00000000
"ClearRecentDocsOnExit"=dword:00000000
"NoTrayContextMenu"=dword:00000000
"EnforceShellExtensionSecurity"=dword:00000000
"NoPrinterTabs"=dword:00000000
"NoDeletePrinter"=dword:00000000
"NoAddPrinter"=dword:00000000
"NoRun"=dword:00000000
"NoSetFolders"=dword:00000000
"NoSetTaskbar"=dword:00000000
"NoClose"=dword:00000000
"NoViewContextMenu"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableRegistryTools"=dword:00000000
"NoDispScrSavPage"=dword:00000000
"NoDispAppearancePage"=dword:00000000
"NoDispSettingsPage"=dword:00000000
"NoAdminPage"=dword:00000000
"NoProfilePage"=dword:00000000
"NoDevMgrPage"=dword:00000000
"NoConfigPage"=dword:0000000
"NoFileSysPage"=dword:00000000
"NoDispCPL"=dword:00000000
"NoDispBackgroundPage"=dword:00000000
"NoVirtMemPage"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network]
"NoFileSharingControl"=dword:00000000
"NoPrintSharingControl"=dword:00000000
"NoNetSetup"=dword:00000000
"NoNetSetupIDPage"=dword:00000000
"NoNetSetupSecurityPage"=dword:00000000
"NoEntireNetwork"=dword:00000000
"NoWorkgroupContents"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp]
"NoRealMode"=dword:00000000
"Disable"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop]
"NoHTMLWallPaper"=dword:00000000
"NoChangingWallPaper"=dword:00000000
"NoCloseDragDropBands"=dword:00000000
"NoMovingBands"=dword:00000000
"NoAddingComponents"=dword:00000000
"NoDeletingComponents"=dword:00000000
"NoEditingComponents"=dword:00000000
"NoClosingComponents"=dword:00000000


Its a lot I know...

[TJ_2k7]

Signature thief
Well partly anywho

I'll try these when i go back, they look interesting....

[Xcellerator]

I got another one, it's for changing your wallpaper:
CMD >> copy "<the wallpaper you want location here> /B "%userprofile%\AppData\Roaming\Microsoft\Windows Photo Gallery\mywallpaper.jpg"

Then...

CMD >> reg add "HKCU\Control Panel\Desktop\" /v "Wallpaper" /d "%userprofile%\AppData\Roaming\Microsoft\Windows Photo Gallery\mywallpaper.jpg"

Then Log off and back on and you should see your new wallpaper. This works on vista, I'm not sure whether it what the wallpaper location on XP but I'll check my server (its Xp ) and get back to you. This worked for my vista machine and I'll try it when I get back. Let me know your thoughts on this...

[Xcellerator]

To query your schools proxy server, enter into CMD or create a shortcut to:

Code: Select all

REG QUERY "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v "ProxyServer"

And Change its value to nothing, (i.e to completely the connection to the proxy) use this:

Code: Select all

REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /ve "ProxyServer"

You may have to log of and log back on for the changes to take effect...

[TJ_2k7]

ALL HAIL THE HYPOTOAD!!!

[Xcellerator]

Yeah w00t!

[ICT Tech]

ALL HAIL THE HYPOTOAD!!!

Yeah w00t!

LOL! Fair Play to ya!

[kizza001]

i just tryed the Reg add shortcut and the command prompt apears then disapears what should i try next

[Xcellerator]

I had the same problem, luckily I found a solution:

Use the CMD shortcut (that one works...), then right-click goto properties of the shortcut you want to run, copy and paste it into cmd and it works... BTW, you can't use Ctrl-V in cmd, you have to right click and click paste...

Hope this helps, it worked for me...

[kizza001]

what do i paste in the propertys