Xatrix Security

[Xcellerator]

I cannot believe this worked, my admin is such an idiot!!

Shortly before school ended, my admin installed Microsoft Small Basic, after trying it I realised that it wouldn't run. So I told my admin about the problem and he said, and I quote, "Oh, Don't worry about that, I'll just enable all EXEs to be run on the student accounts...". IDIOT!!!!!! . So now I can run any EXEs that I like, now I can use my U3 device and even listen to Spotify using my iPod headphones!

Let me know if any of you have any ideas of what I can do and if any of you have any luck doing the same thing...

[muto]

In a properly secure system, the the ability to execute code does not lead to more access, because it can only run with the rights of a normal user. However, this is probably unpatched XP, with crappy RM code on top of it. Look into the various Windows exploits that've come out lately. See if you can bring in metasploit or something. Think creatively.

[Xcellerator]

Ok, yeah that's a good idea, I didn't think about metasploit. What about bringing in Cain on a USB and running and APR Poisoning the main server to pick up what username and passwords were used to access the easylink site... Or installing a stand-alone keylogging app to harvest user accounts...

[muto]

Both good ideas, both require administrator priviledges to run, and thus neither of which will work. It's good to see people thinking though

One thing you want to bear in mind about an APR attack - there's no reason it has to run from a school machine, a laptop will do perfectly (use Ethernet over wireless).

[Xcellerator]

Yeah but I'm only in year 9, so bringing in my laptop is a no go....

Maybe with my PSP I could crack the WIFI password with aircrack, perhaps???

What if I made an bat file which creates a new account on the network and then makes it admin (NET LOCALGROUP administrators <ACC_NAME> /ADD) and then compiled it to EXE and ran it. Would that work???

[muto]

You won't be able to add users with a normal account.

I've no idea about cracking wifi with a PSP; odds are the pass is related to your school's name..

[Xcellerator]

Here's an article for AirCrack-PSP.
(http://blog.alltechrelated.com/2009/01/ ... -your-psp/)
You need a modded psp though, I did mine myself If your interested try http://www.pspmod.com.

And buy a Pandora Battery of Amazon not PSP Mod. Mine works perfectly...

[TJ_2k7]

You dont need a pandora battery to mod psp's no more. Did mine all through software....

[Xcellerator]

yeah i know but I did mine ages ago..