password cracking 5

the admin was very surprised and the admins asked me how i did it. i did point out that the greatest of their weaknesses were that they left the computers without signing out, weak password choosing and depending too much on the ready made tools out of the box. from that day on they hired some penetration testers to audit the school network.
this is just but one real life example on how most of the admins are ignorant, dependent on tools and lazy.
stay safe and don't depend on the programs out of the box.

password cracking 4

yeah i was ready for that. next i opened the cmd and typed the path to the other copy. within seconds, i had the hashed passwords on my flash. when i reached home, i launched 'john the ripper' to crack the passwords. with the dictionary from milw0rm that was used to generate the markov file, and john's magnificent rules, i cracked all the passwords within 72 minutes. the next day i went to school and was able to login as an admin. i sent an email from the admin address to the head and all other admin staff.

password cracking 3

so i downloaded a copy of fgdump at home and saved two copies in different folders. the next day i went to school and was eager to find an unattended admin logged in. i saw one of the admins at a computer and told a any to tell him that the headmaster was calling him. the admin woke up and left. i had at most 5 mins to complete my plan. i inserted the flash and opened the folder containing one of the fgdump copy. the copy got automatically deleted and a virus warning issued.
more on the next blog :)

password cracking 2

next i wanted to know their network structure and if they are monitoring the students activities. went to whatismyip.com and took down the ip. the ip directed to a proxy, meaning that there is a high probability that all the traffic is filtered and logged. i went home and used nmap to scan the whole subnet to get an overview of the structure. the wonderfull zenmap have me a graffical view of the network structure. all the network was directed to a proxy then to a firewall.

stay tuned for the next blog :)

password cracking

PLEASE NOTE:
password cracking is an elegal activity if done without permission. do not point fingers at me if you are doing it without permission

a few weeks ago, i decided to test how well have the admins at my school protected the systems. i walked up to the headmasters office and told him of what i intended to do. he told me he'll talk to the admins and let me know of what they think. the next day, he told me that the admins were ok and have me a WRITTEN permission to sign.

more in the next blog!

the link

here's the link to the article of the previous post. read it and comment out what you think is bad. please consider in mind that most of this is just lies.
http:\\www.adequery.org/stories/2001.12.2.42056.2147.html

importance of public knowledge on hackers

some people get the false impersion on hackers mainly from other sites that deliver false contents.
for example. recently i read an article written by someone on how to determine if your son is a hacker.
honestly, i don't think this guy even bothered to open google and type the word hacker! for example, he mentioned that "lunix" is an elegal operating system and that telnet is a software used to hack other servers in a flash!
i was very shocked when i read this article. i'll be posting the link soon.