Idiots @ School

Some idiots at my school set their internet passwords to autocomplete in IE7. I simply used -=Gonzor=-'s Switchblade to get every password on every computer in the school library… aaah, I'll forge emails to them to let them know they've been compromised :p

and tell the admin to remind students about how to avoid such idiocy :p

He has a sense of humor, maybe he'll make js popups on those people whose passes I have :p

But as for the network itself, our school is one of the most secure around… :angry:

just curious, but how many schools networks have you probed? how do you know yours is so secure…. jk…. im just an asshole

mm, the school network is one of the main reasons I look forward to going back to school. it's like a free testing environment.

Nice job and js pop ups for the win! I hardly use my school computers. And when I do I'll just mess around on the computers with the 40 minutes I have :xx:

well my only comp class I have not finished (desktop pub.) uses Vista… bah! Damn data exe prevention, half my portable apps wont run

But the library is still XP (thank god) so whenever I get a chance (not often… I used all of first year spanish in there last year ^.^) I'll go and look for stuff to break into. We use squirrel mail (red hat linux + sql 'n stuff) and most users have easy-to-guess passwords (admin accounts on computers in engineering class ftw)

but the actual network itself is secure. But thanks to gonzor (and SANTA for letting me knwo about it!) I now have many email and internet accounts. Anyone knwo how to crack a SAM?

I think I'll tell the admin (maybe thru a bogus yahoo email account… mmm…) and see if hell post reminders for the idiots :p

ThorsDecree wrote: Anyone knwo how to crack a SAM?

You might find this interesting: http://kent.dl.sourceforge.net/sourceforge/ophcrack/ophcrack-livecd-1.2.1.iso http://www.irongeek.com/i.php?page=security/localsamcrack2

thanks, I'll check taht out

Oh, the SAM. How do I crack thee, let me count the ways…

If you've got the hash already, search on plain-text to see if someone's already cracked it. If nothing shows up, you can submit the hash and wait. You can also crack it with cain.

If you don't have the hash you can get it with bkhive and samdump and if you already have admin but just want to know their password you could use SAM Inside.

There are tons of tools for this and I believe there are some good tutorials in the articles section here.

If you need help you can pm me.