.

NEED advice on a hacking project :]

<<

Bryslayz

Newbie
Newbie

Posts: 2

Joined: Thu May 15, 2008 11:04 pm

Post Thu May 15, 2008 11:13 pm

NEED advice on a hacking project :]

I take a Computer Engineering class in my highschool, and our awesome teacher has given us an awesome networking security project.

The goal is to hack into our classmate's computers and extract a file out of their "My Documents" folder, through a simple small network, using "any means necessary", aka: we have permission to use password hackers, firewall blockers, worms, viruses et era (as long as we dont break the hardware).

I would GREATLY appreciate advice and opinions on the best way to go about this intrusion and extraction, such as method and software recommendations.

bryslayz

p.s.
i am going to install COMODOS firewall on my computer to help evade my classmates, good idea bad idea? (i am also using avast AV, we arent allowed to use AVG)
<<

Bryslayz

Newbie
Newbie

Posts: 2

Joined: Thu May 15, 2008 11:04 pm

Post Thu May 15, 2008 11:16 pm

Re: NEED advice on a hacking project :]

the class is full of noobs, so there are only about 2 people i have to really worry about.

but one thought i had was to use the web browser to access the router settings and ban my classmate's IP addresses after I have done my business?

That might be kinda mean since this project is a big grade but hey, survival of the fittest right? lol
<<

don

User avatar

Administrator
Administrator

Posts: 4226

Joined: Sun Aug 28, 2005 10:47 pm

Location: Chicago

Post Fri May 16, 2008 12:04 am

Re: NEED advice on a hacking project :]

Welcome to EH-Net. Hopefully coming here at such a young age will lead you down the ethical path in the future. That being said, your teacher has presented what seems like an isolated environment for you guys to have some fun.

A firewall on your system is a great first start. I don't know Comodo well, but there is someting called the Stealth Wizard. There are mixed results reported on their forum. But try to get some stealth, so that the other classmates won't even see you on the network during their scans of the network. Then try Nmap yourself to find your targets and other useful info. I'm not going to tell you how. That is your homework to do.

Next, are these machines configured identically? If so, use that to your advantage. Change your admin password, then use the old admin password on other machines. If your machine is running remote desktop, then so are the others. Deny RDP on your machine and login to theirs.

Without knowing OS version, apps on the machine, etc. I can't give too many specific recommendations. I can guess XP since their is a My Docs folder, but I don't know SP or patch level. Plus, I don't want to do your homework for you.

Try doing a little research on null sessions in Windows XP, fgdump and 0phcrack or Cain.

Kudos to your teacher. I'd like to meet him/her.

Let us know how it goes.

Don
CISSP, MCSE, CSTA, Security+ SME
<<

RoleReversal

User avatar

Hero Member
Hero Member

Posts: 928

Joined: Fri Jan 04, 2008 8:54 am

Location: UK

Post Fri May 16, 2008 2:49 am

Re: NEED advice on a hacking project :]

Bryslayz,

I wish I had a teacher like that when I was studying! Would have made study/homework much more fun ;)

As you state that most of your class are inexperienced don't forget social engineering. All it might take is a quick email to one of your classmates appearing to come from the lecturer or a sys admin and they might give you the keys to the kingdom. I'd pass this one by your lecturer first to ensure you will get the same credit for a non-technical solution.

As Don said, let us know how you get on.
<<

LSOChris

Post Fri May 16, 2008 9:25 am

Re: NEED advice on a hacking project :]

yup, time to send a spoofed email as the teacher asking for their password.
<<

jimbob

Post Mon May 19, 2008 2:44 am

Re: NEED advice on a hacking project :]

If you have physical access to the opponent's PC you could just copy their files to a floppy or a USB key. Nothing wrong with being a "lazy hacker" and spend the least amount of energy to accomplish your goal ;-)

Jimbob
<<

pjayes

Newbie
Newbie

Posts: 46

Joined: Sun May 18, 2008 5:48 pm

Location: capecod

Post Mon May 19, 2008 8:07 am

Re: NEED advice on a hacking project :]

learn nmap it is one of the best scanners out there to start you on your way
<<

p0et

User avatar

Full Member
Full Member

Posts: 197

Joined: Thu Nov 02, 2006 4:38 pm

Location: Victoria, Canada

Post Wed May 21, 2008 3:42 pm

Re: NEED advice on a hacking project :]

I'm not sure what kind of firewall your classmates will be using, BUT... I would make use of the suggestion to spoof an email from your instructure and add on to that.  I would make the email come from your instructure and send it out to all your classmates except for the 2 who you think are experienced.  In this email, I would send an attachment or a link to an AV app (with your trojan embedded).  Make the email sound good, something about him suggesting they use this specific AV/Firewall.  You get the idea. From here you're bound to have at least one person install the trojan and you're in.
GCIH, Security+, Network+, A+, MCP, DCSE
<<

LSOChris

Post Wed May 21, 2008 5:31 pm

Re: NEED advice on a hacking project :]

you can go simple too

do up a msfpayload executable tell them it is a MANDATORY system update for the lab network.

:-)

Return to Opinions

Who is online

Users browsing this forum: No registered users and 1 guest

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software