How to gain access to all accounts on a school/work network.

Hello everyone

I got a request to make this instructable.
I will explain to you how you get the password of the local admin, network admin, and everyone else on the network.

Disclaimer: This instuctable is for educational purposes only, doing this at your own school may get you expelled or worse.
Only do this when you have permission from the system admin.
Note: GETTING THE NETWORK ADMIN does not work everywhere, you have to be lucky.
Note: the files used do not contain viruses, no matter what the scan says, just press "don't do anything".

Step 1 YOUR TOOLS

If the computer you're hacking has an AMP (webserver with apache and php) you need one thing

• An usb drive with a special PHP file I made. I'll give it to you during this instructable

else, you need two things:

• A bootable linux distro (I use knoppix, but feel free to use everything else)
• A usb drive with the programs "Saminside" (check insidepro.com) and "Fgdump" (on foofus.net/fizzgig)

and of course you need enough time and nothing to lose.

Comments

[geeklord]

what do you mean by "or worse"?

[TheRegalian]

Not to mention, you'll get shouted at by the local police... -.- ... but yeah; court, fines, possibly juvey if it's bad enough.... you have powerful information bro, just be careful how u use it

[damasta]

you can get expelled or worse for example they can sue you for breaking into their network

[cowen]

You have the right to use the computer and the network but so much that you are not thwarting the security of the network.

That can be seen as a Felony.

7 kids at Plano ISD were arrested by Secret Service and prosecuted for Hacking.  They are not allowed to be anywhere near any Technology driven device.  No Cell Phone, no Game system, No Computers, if you can use it to hack then they are banned from it and if they are caught in vicinity of such a device it is a breach of probation and subject to incarceration.

I was part of the group that collected the evidence.  Do you think you can survive with out Tech gear?

[messmaker]

we can get tech everywhere bro, its the 21st century. i could walk up to a internet cafe, use fake registration and get back where i left off.

[cowen]

You did not get the point! FELONY.... The point is it is not your network, and not your computer both belong to the School, Library, Cafe' shop, ect. You say you can just use a hacked (fake) account which is not yours. That is the classification of Computer Crime and Identity Theft both of which can be charged as Felonies to minors who commit Adult crimes. As stated above SEVEN (7) students were arrested and charged by Secret Service for the Joke (Crime) and the School also levied charges for the mis-use and abuse of School property. Sentencing ALL 7 may not have any 21st century equipment, No Game boy, No Cell phone, No computer, Nothing that may allow the student to get online and nothing with more power then a basic manual Adding machine. Yes you may line 21st Century but you can be thrown into the 17th century once caught . There is a Legitimate use and a illegal use which you use makes the case against or for your Sentence. All I ever ask is that youth of today use their gifts to be a member of society that is the ones I want to hire to help with my Computer Security Company. We hack networks only after the signature dries on the (school term here) Permission Slip is signed and verified. One to get paid and Two to back ourselves in court if there is a problem with the hack. Please Hack legally

[messmaker]

yes, but they cannot monitor you 24/7. and where there is urban property there is the technology. All i'm doing when i do such things, even a simple DoS attack, is making my mark in society. if ANYONE gave me the chance to do so in a legal manner e.g. testing security software, i would do so. But no one believes people can do such things with computers until ive wiped there network and corrupted their files. So until everyone wakes up to the power of computer manipulation, im going to stay on the same track im on now.

[cyberhacker]

hey messmaker plz i am just the beginer and i want to know how to gain access on the admin account on the other computer plzzzzzzzzz just guide me to do such thing i will be very thankful to you..................

[cowen]

PISD uses a logger that sends all information to a server that uses a program that looks for certain criteria of hacking. Its pretty neat. We can then look at the log and other activity that is done on the Schools property. We do not have to screw up a system to show it is unsecured.

[messmaker]

no, but its better to have a hacker try and get in that isnt going to do any harm, to test it then have a hacker get in and start screwing up the system.

[cowen]

And that is where I get contracts and make money for me the hacker and what ever other equipment vendors I need. Why do it for free.....

[messmaker]

because they didnt give me the chance to do it for money,

[cowen]

That is where people like me are important. I have customers and they all want that to make sure they are safe. I usually have 2 or more guys hack each others work to make sure nothing was missed. The customer must sign a contract and I get paid up front half before the work is started and right after the work is completed. You just have to know how to sell your self and services you can provide.

[messmaker]

trust me, i've tried. but they dont believe someone my age could cause any damage on even a unprotected system. so i show them what i can do, on their systems. that gives them a good picture. and i make sure they know it was me, but they cant prove it.

[cowen]

What you need is someone to do as an agent or broker would work. Be the middle person that is respectable and responsible to get things done legally and then let you have your time to hack, then report your findings and then let the agent go back with those reports and even can bring you in with them to show them how vulnerable they are to a kid and explain if a kid can do "this" then "what could a full blown hacker do"? Some still think it a hoax but at least you have papers so that if they hit again you can show that you tried to warn them and if the attach used the ports that you used to show them the problem and that are still not closed or secured there is a history there and if this time there was a loss the company would look pretty open if right after a security Audit there was still a breach "Because they did not take action to the Audit" the next questions are the worst and depending on what type of business they are are not always good. I am working with a Judge who has a lot of influence with companies on ID Theft and getting compliant with federal laws.

[messmaker]

Trust me, no one believes I have any skill in this area.
Not even my own family think I can do anymore than open a webpage.
My dad believes me, because he actually sat down with me and asked me to hack his facebook page to prove what i could do.

but no one gives me that sort of time, because of my age.
my dad's gone to people around the world through the internet trying to show people my worth in tech. but they all judge me based on my age.
Sometimes I get angry with the rejection and infect the company or individuals computers as, well, an act of revenge. I would be more than happy to show them how i got into their systems as a remote administrator, before I had to do such things to show my worth.

[cowen]

Well I am always looking for talent. What all things can you do besides just hack in?
I am looking for someone that can not only get in but also setup security to prevent the breach.

I have a nice http://Monowall.ch firewall setup and would like to start building and configuring these.

Age is not really a problem as talent is the thing i want.

1099 employment.

I have not really taken advantage of the breach market but once I have a reliable person to do the work.

The main thing is contracts so that everything is covered.

[messmaker]

m0n0wall is ok,
ever tested smoothwall?

ive found that m0n0wall is quite susceptible to a DOS attack.
this can be patched manually, but it should of been built into the untouched
main frame of the firewall :l

im not a big fan of m0n0wall sorry.

i can find exploits for websites, programs or systems (which i have been doing for a while and posting on the internet for other hackers).

im constantly looking for something else to learn about, or someone to learn from.

[cowen]

Ill look into smoothwall, I liked the hardware requirements of mono.

I have it running on a 486 with 16 ram and a 64 meg CF card Intel 4 port NIC.

Very nice simple system.

[messmaker]

that is very very nice i must say (:

whats your mb/sec transfer rate on such a system?

STR (Sustained Transfer Rate)

[cowen]

I do not use a very high DSL connection here mostly a connection to email my off sites use of web servers where there are fatter pipes.

I have heard reports of 100meg in and out bound. I am only using half the resources in the 586 however. 66mhz pc

50% cpu
48% memory out of 16meg
16 meg of the 64mg CF Flash.

I had an extra pc that I wanted to use, There was no reason to build a power house system for this.

Advanced WAN Statistics

Connection Rate (Down/Up): 3360 Kbps / 832 Kbps
Connection Status
In Packets 1420020 Out Packets 1010583

IP Address
Routed IP x7x.xxx.xxx.xxx
Primary DNS 68.238.96.12
Secondary DNS 68.238.112.12

Ethernet Status
In Packets 1424286
Out Packets 2940902

[messmaker]

you should better utilize ur system setup by just getting FASTER INTERNET.

thats not so bad though,
what do you use it for?

you could probably squeeze a bit more performance out of your system or even your connection speed.

[jason the red]

yeah getting caught hacking is serious and can have so very harsh repercussions

[messmaker]

but you have to get caught in the first place. you can always cover your tracks, you just have to be fussy about backtracking.

[jason the red]

very true cover your tracks well and stay under the radar and youre good to go just dont go trying to hack into a government system they dont really appreciate that

[messmaker]

hahaha ive noticed.

[aamiralikhan]

hey hi ..... may i have a min plz....


i am just a begginer, so plz some one tell me about this...

[messmaker]

what would you like to know?

[co'grady2]

or just use ophcrack and itll be done in under 10mins

[arpoky]

When you say "Just don't do anything", about the files/programs involved, it makes me (and probably the majority of everyone else who has viewed this Instructable) even more suspicious.

[arabha]

Hey! Nice theme you got! :)

[x-treme]

Hm, on my computer, when I opened SamInside, my antivirus went mad. At school the computer will probably explode. :|

Maybe it's best to run Windows XP Live from a USB or CD, and then run SamInside. :)
I'll try it today at school. *evilface*

[jmarsiglio]

If anyone could crack: C6B59A3067DF776FCE1F3CB92F9A1A19:1AC9951806FD993DA2025D68F498DDA8

And tell me how you did it! :)

[jmarsiglio]

I also only have about 50GB of space...

[jmarsiglio]

Hey, does anyone know an alternate method to opening the php file via localhost, as I can't setup a web server at school o.0 Thanks

[damasta]

If your coputer doesn't have a webserver, ignore version 1 of all steps and just do version 2

[jmarsiglio]

Thanks I figured that out ( bad question ). Now I'm wondering a few things...
#1. I'm trying to crack the Administrator password, I've tried all programs ( ophcrack program and site, jtr ( i quit because it was taking too long ) and Cain. Most of them showed:

LM Pwd 1 : not found
LM pwd 2 : AW
NT Pwd : not found

What program should I use to crack this? Is it a NTLM password? If so, do you have any rainbow tables I can download for NTLM because I like ophcrack. You can e-mail me at [e-mail].

Also, even if i do find the local admin, when i try to dump the network admin's computer, I'm assuming they have the same password on their local computer. And after that even if they do, I'm assuming the netword admin uses his local account instead of an account on the server. So, if he logs on using the server ( as everyone in the school does ), I won't be able to dump his hashes...

PS: if you know any good sites for noobs like me please tell, I really like this and I download bt4... don't know how to use aha... Thanks mate!

[eliteh4ck]

And if you don't believe me about his stuff set a password on your own comp and try to do this

[kite239]

The "Open SYSTEM Registry file" window does not open. I've opened the sam file but the system file won't show.

[mvsuresh]

hey f*** lm value will never decrease.....how much time v have to wait for that....