Hacking School or Library & Public Computers to SURF to ANY Website

Wow this was old school.

Update May 2012-

I would have a bootable USB stick and run a pocket LINUX version today. Or if USB Boot is disabled in the BIOS then the Phone tether method also works with USB or wirelessly. Then you have no filters, blocks or issues. You can install anything and run it to access the network.

Now that everyone has phones with internet service is no big deal to get to your mail and webpage anymore.
It is cheaper to use WiFi calling or surfing than 3G or 4G services, so look for open or public WiFi and use your phone connected and preferenced to WiFi at home, work or mall etc.

Stuck at school? Setup your phone to VNC or RDC "remote" into your computer at home. Then just control from anywhere.

Grounded, cut off....awwww. Even game consoles can run LINUX. If you have anything with a CPU someone has unlocked it. 


Description:

At school, in a library or mall and have access to a PC but cannot "surf" to any thing but their one site or a "filtered" subset of the internet?

Is Youtube blocked?

Is iTunes, Bittorrents or other sites blocked?

Can you not download or installed software?

Ok...we'll try to help you dorks out.


ERCK

Step 1 Overview

Many types of 'blocks' are placed on schools and publics computers...however they have limited funds and can also be open to social engineering....

They have to block ALL exploits and all access to command line, process startup/control and downloads...plus keyboards, admin roles, powerusers or even USB ports and BIOS firmware!

if ANY of these are exploitable then we have means to attempt to access any system's internet access....or a cooler idea is to enable a PC's "ICS" Internet Connection Sharing, or peer-to-peer wireless 802.3 even Bluetooth and use your Bluetooth or WiFi phone, pda or itouch to then surf 'unobstructed' ! hehe


I'll provide follow-up steps for EACH below as time permits.

1) Simple browser filter or cheap software like netnanny etc.

We exploit this with a proxy or web redirector and kill -f process name or id

2) Advanced Network filter and site blocking

Many proxy or redirector will bypass these as well, where they do not we also use advanced proxy services like the Vidalia bundle , TOR, Prioxy & Vidalia

3) Keyboard disabled or missing

OH soooooo easy, Microsoft allows for "disabled" users with an on-screen keyboard! duh

4) Kiosk Mode IE

OMG even easier! ALT+f4 logs off IE and then start whatever you want as above or see below....

5) Starting and stopping processes, killing or modifying msconfig etc

helpful for custom downloads or setup of exploits above

6) Basket / Corner cases

tough nut? Post your isseus

You need to research the environment, use human engineering develop specific exploits and then go get 'em...

Comments

[erckgillis]

Hummm, think you know eh? Not so much young Jedi...hehehe

You only see what is front of you! Not the possibilities! Open your mind. Feel the power of the farce!

Ok enough Yoda channeling. Guys you must adapt, improvise and overcome. So you have a Mac or PC or proxies, firewalls and DMZ etc. Please ever heard of hacking?

Two ways -

1. Social engineering. My fave, get a keylogger (usb or software) install it then break or lock your machine. Admin comes to fix, captures ID and password. And then do as you wish.

2. Reboot any Mac (They have Intel chips... you can even dual boot Windows!) or PC to a Linux build from your USB. Try the new Unbuntu it has all the drivers,USB loader and all!

Then add your new OS any proxy, IP redirect or use Admin to open ports or proxy. Heck run your own proxy on a VM and give the address to anyone to bypass defaults, plug a portable hotspot or thethered 4G phone into network and access from anywhere to allow unlimited Net access over wifi or LAN via your new VM proxy on Linux!

Go padwan and explore...

Master ERCK

[erckgillis]

Ok, I recently re-read all these comments. The data is "mostly" ;) still true. What ever the reasons here in the US unlike the Chinese and Egyptians trying to block the Internet at home, work or school is not going to work for long.

The Internet is FULL of easy to follow well documented process and programs to find anything. Now most of us have 4G phones with tethering so you can use any computer to make or access your own network, Wi-Fi or high speed wireless.

It is a waste of money to filter, block and try to process ALL the network traffic sent thru even a medium sized school or businesses Internet traffic. They do this to protect themselves not to prevent you from access.

As always use this as a learning experience and be kind...

ERCK

[jinkz4ie]

is there ways too get on facebook and check your mail even though the school as it block

[erckgillis]

yes.

What did you try? You typed it in, it didn't work and so you gave up?

Can you install and download software on the machine? If so you can do anything. If you lack Windows Admin or OS X root then you must use url redirectors or proxy servers.

The eaiest these days is a cell phone in teather mode. You can teather your 4G wireless to the PC via USB, Bluetooth or WiFi. Just setup phone teathering or download a App for your Mobile OS and then connect via USB or WiFi. Surf away.

If these are blocked then read steps above and find the opening. What CAN you do on that machine. I had a library PC that had no keyboard, browser was locked in Kiosk mode. No problem... there is a onscreen keyboard, I just killed the process and started IE.

[darthbindy]

just to let you know, dork means wale-penis!

[the hellphantom]

i know a better one but its to complicated for you guys

[erckgillis]

Oh, goods caus' we'vs uh don't need none dat complicated stuff 'round 'bots har!

[jedi_knight]

HAHAHAHA! these are all great ideas for normal schools until you come across my school... Lets just say i Mac computers are the most unfriendly devices to circumvent school security! These things are so locked down i cant even access basic things like the contact book and garbage band. Then once you get to the Internet on these computers you realize that all web traffic is being directed through a HTTP web server that is designed to scan through all incoming web traffic for suspicious content....

[jbravo4]

Check to see if port 22(SSH) is blocked then use your home sys as a proxy.

[fdelgado1]

This is a little complex for me can you message me a way that is a little easier there blocking everything with lightspeed filtering.

[erckgillis]

yeah sure ... On the way noob!

[ddodd]

an easier way to get the i.p adress is to open notepad and type @echo off go down a line, and type "ping www.whatever is the webpage.com then! go down a line and type pause!! then save as whatever.bat!! when you open the batch file it should give you the I.P address, it will look like this \/ @echo off ping www.youtube.com pause there you go!

[Ccraig7860]

What if the computer is a Mac Osx 9?????

[Roby718]

make a pl file containing this:

ping *DOMAIN*

[GameNox]

But what if it blocks batch?

[jj3502]

my school blocks ip's

[Tv1996]

Go to Run then type in cmd. type in: net user /add 9000 password log off sign in under 9000 and for the password put password change the domain to this computer log in and enjoy

[jj3502]

the school blocks run and cmd :(

[toogers]

at home, burn a cd with a .bat file on it (doesn't matter what it does- it could be blank even.) then, go to school, put cd in computer, and click on the .bat file you made at home. it should open the command prompt, to launch the script you   made. then, put in one of the above .bat scripts on this list, and waalaa.

[garychencool]

What is you cannot access cmd.exe???

[Roby718]

CMD.exe is simply a link to command.com (Pro Tip: .COM(MAND) files are the same as EXE files and originate from pre-internet DOS days) blocking command.com is dangerous (assumingly) and therefore admins don't block it, thinking "thos darn kids" are too modern to know about command.com anyways.

[GameNox]

What about baracuda?

[skindowg]

how do u get past schoolblocks on the net when all of the proxy sites ar eblocked? ive tried everything i have windows 7 so i cant do anything when it has a block

[sushiman]

Thank you sooooooooo much I love going on newgrounds at school!!!

[erckgillis]

Want a EASY HACK!... Use your cell phone with a cellular data cable then use it's CDMA, EDGE or GSM network for the PC at work or school. Else you can get a dedicated cellular data card via USB and plug into any PC and access you cell network... Browse away... E

[ubr.bzkr]

wow thats a good idea I never thought of that before. in scouts I have an advisor that could help me with that, cause he uses one to do his job which is managing data bases for medical supplies and prescription transactions.

[IPWN4JC]

your lucky to have friends in high places.

[Ibanezfoo]

Well, good luck with your burger flipping jobs with no internet access when your HR department calls you in for violating company policy, or your school kicks you out for violating school policy. You kids should also realize, it doesn't matter what proxies or little tricks you use, the firewalls usually log all origination and destination traffic... so while you think you are slick using a proxy, the firewall still shows your local address connecting to the proxy (violation) and usually there are some pop ups or something that you didn't count on logged as well (violation). The filters we use appear to be easy to defeat.... until we print up a log and staple it to their pink slip and give it to them before security escorts them out of the building. The look on their faces is priceless. You all should really have a good look at your school / jobs internet policy. Some things will even land you in civil court or even jail.

[Roby718]

not if you obfuscate request and proxify them, hey wont even bother tracing it.

[NozeDive]

I spent my entire high school career browsing the forbidden websites at school. Now I am the assistant director of security for a medium sized building complex that houses offices and businesses, ranging in size from a one man sized operation to a multi-billion dollar international energy generating/transmitting corporation. So yeah, it doesn't mean you won't get a real job. And it doesn't mean you can't make it into college, or that you won't learn anything while in high school, as the previous poster insinuated. (I scored in the top three percentile in the county on my ACT, and am a student at Kent State University) I agree that it is riskier doing this at your place of work, which is why I don't. And while I attend college classes, I don't have to worry about this because Kent State does not block websites. Downloading an MP3 or reading about paintballing or video games while in class isn't a guarantee that you'll end up at "burger flipping jobs". If you "kids" get good at this kind of thing (complex problem solving) then you'll probably end up with a very lucrative career. I think this Ibanezfoo is just bitter that he couldn't figure out a way to get around security without getting caught, or is too old to have any idea what it's like to be a high school student with access to only a heavily censored internet. (I'm not going to explain what's that's like. If you're too old to understand, you're too old to understand. Maybe ask the Chinese) »Tøny P.S. Just remember that "tricking" a computer system isn't always enough. Use social engineering whenever possible. Good luck "kids".

[sparky23]

you told him;)but still you should be careful with these things.lookin at porn during class isnt worth the consecuence of getting caught

[ubr.bzkr]

haha I think its so funny how much people like admins care about petty little things such as avoiding a site blocker. I mean its not like its stealing from or hurting anyone which is a real crime. I laugh at there inability to find anything better to do other than just busting kids for avoiding there precious blockers and firewalls. the only reason most kids do it anyway is so that they can do little stuff like watch videos on youtube, chat on face book, or do stuff on Instructables like me.

[Ibanezfoo]

Thats where you are wrong. You ARE stealing. This mentality of todays youth is disturbing. If you are at work, you are being paid to WORK, not screw around on the internet. It is most definitely stealing your employers time. If you are at school, my tax money is paying you to be there and to learn something, not mess around on the internet, so you are in effect stealing from me.

[Cyberphox]

I agree, like, to have such bitterness towards your fellow man as to expend so much energy to deprive him of something so petty?? That's the problem in this world. Everyone's so worried about what's being taken from them. When you look back is it all worth it? I give to people all the time, possessions, time, and it all comes back, so instead of hoarding & getting nowhere, try giving & seeing what you receive in return. And as a guitar player I'm personally embarrassed that that attitude is associated with a guitar brand, guitars are all about cool.

[Ibanezfoo]

What the hell are you talking about? I have never read a more off topic nonsensical reply in all my life. Guitars are about music. If you think they are about being "cool" that is simply pathetic. I am embarrassed a fine tool of musical creation is being used for someones pathetically simplistic goal of being "cool". Rock on cool guy.

[Cyberphox]

I was agreeing with you, so whatever, and if you don't think guitars are cool then why do you like them so much?

[Ibanezfoo]

You know that post is over 2 years old, right?

[erckgillis]

It's updated...well kinda...

[DELETED_evilfrogie]

(removed by author or community request)

[ubr.bzkr]

well actually its not that easy. I'm pretty good friends with my admin and he says that he and all the admins in my school district have to ask the schoolboard to unblock website. it is a hassle to do this in the first place, not to mention it often takes more than a week for the board to unblock anything.