Hello!

I have decided to make a small list of the "vulnerabilities" (more less tricks) in my school computer system. These are Windows only.

Some of these "vulns" may not work for you.

Universal:

• BIOS password is just the enter key
  • If that doesn't work, the escape key might work, too
• If your school redirects the C:/ drive to another partition, you can open the directory of where a program is located and move back in directories till you get to the root of the C:/ drive
• Execute cmd commands through a notepad batch file

Windows 7:

• The wallpaper isn't normally changeable, however, opening Firefox and changing the background via an open image will work. This lasts until you log off (in my case, anyway)
• Get an elevated command prompt with this
  • This allows you to create an administrative account, allowing you to do whatever the fuck you want

Windows 10:

• You can change the background by editing the themes cache in the AppData folder
• Windows + X can open cmd or powershell (taskbar preferences)

There are probably more, I just can't think of any on the top of my head.

I am not responsible if you tamper or get in trouble.


Enjoy!

 

[YamiZee]

I have a USB drive with a bunch of tools and linuxes, including a thing that bypasses the need for a password so that's what I used to always use when I was still in school.

 

[SomeGamer]

Our school computers have DeepFreeze and nothing else.

 

[JustAKirby]

You can bypass website blocks using psiphon
https://s3.amazonaws.com/0ubz-2q11-gi9y/en.html

 

[FAST6191]

Best bet is not to as it seems schools these days overreact horribly and while you might win the court case it is still going to be 2 years down the line. Also make a friend with wifi that lives next to the school or if you are not in a whitelist only situation then tunnel in to your house. Also on BIOS there are times where you can bypass passwords that might have been set with backdoor passwords ( http://www.uktsupport.co.uk/reference/biosp.htm ). Not to mention unless your school bans things then bringing in a laptop, phone, tablet or something else is an option.

After that you can go technical, it is certainly how I learned a lot, however it is also a prime location to learn person hacking instead -- I can talk the maths of cryptography but the easy way in is usually via the meat that runs things. If you have ever noticed people shout when they have headphones in then know something similar applies to sight for people with glasses, it is not for nothing that IT/science people have attracted the label speccy. If you have full sight, even if you are corrected yourself, you should be able to spot them enter admin passwords from far away. Best thing to train on is code locks for doors before moving to keyboards. Of course it is also 2016 so small and easy to conceal recording devices are also an option.

 

[Deleted member 373057]

I have a USB drive with a bunch of tools and linuxes, including a thing that bypasses the need for a password so that's what I used to always use when I was still in school.

BIOS locks booting from anything other than the Internal HDD.

 

[Deleted-379826]

BIOS locks booting from anything other than the Internal HDD.

If you boot into the bios couldn't you change it?

 

[Deleted member 373057]

If you boot into the bios couldn't you change it?

It's like a manufacturer thing. You can change the date, time, etc. But the boot is completely locked. Even removed the CMOS battery, no luck.

 

[Luglige]

You could try this to get the administrator.

 

[Deleted-379826]

It's like a manufacturer thing. You can change the date, time, etc. But the boot is completely locked. Even removed the CMOS battery, no luck.

Oh I'll try anyway lmao

 

[ken28]

There is always the Chance to kill certain orohrams even of the task Manager is blocked. In many case you still have access to the cmd windows (windows key + r - cmd). If the cmd window actually opens type in tasklist.

This command if it works will list you all running Programms much like the task Manager would. There you just search the pid of the programm you want to try to kill and type in:
taskkill -f -pid xxxxx

xxxxx being the pid (process id)

 

[GalladeGuy]

You could also use a vulnerability with Sticky Keys to get admin privileges if you are able to edit files in C://Windows/.

 

[Luglige]

You could also use a vulnerability with Sticky Keys to get admin privileges if you are able to edit files in C://Windows/.

Ayy, https://gbatemp.net/threads/windows...ows-7-start-up-repair-and-sticky-keys.428819/

 

[Xenon Hacks]

lol I used to freak out my teachers by running tree in cmd while they had their backs turned the panic on their faces was priceless

 

[Luglige]

lol I used to freak out my teachers by running tree in cmd while they had their backs turned the panic on their faces was priceless

xD

 

[Deleted member 373057]

You could also use a vulnerability with Sticky Keys to get admin privileges if you are able to edit files in C://Windows/.

I am not able to.

 

[Luglige]

I am not able to.

https://gbatemp.net/threads/windows...ows-7-start-up-repair-and-sticky-keys.428819/

 

[Deleted member 373057]

https://gbatemp.net/threads/windows...ows-7-start-up-repair-and-sticky-keys.428819/

I read that, doesn't work as they "removed" the startup repair (I get an error code, whether it's from F8 or from turning off the PC on the Windows loading screen). And since I can't boot with anything but the Internal HDD, shit outta luck.

 

[Luglige]

I read that, doesn't work as they "removed" the startup repair (I get an error code, whether it's from F8 or from turning off the PC on the Windows loading screen). And since I can't boot with anything but the Internal HDD, shit outta luck.

Hm, Startup repair was removed? My schools computer doesn't have that problem...

 

[Deleted member 373057]

Hm, Startup repair was removed? My schools computer doesn't have that problem...

Yeah. My school board is actually pretty secure. Hell, you see all the teachers forced to use Keepass (which by no means is bad, I use it too. Just a nice idea that you don't always see)