[lux]

My school have fairly fast internet, and I would love to add them as one of my zombies

My school have a really weak security, and they won't listen to me, i would love to perform a bit of Grey-hat hacking on them, to prove them wrong
------------------------------------------------------
Information i already know about their secuirty:
- You can bypass the local rights by forcing a shutdown then re-logging, giving you local admin but you still need to login with an admin acocunt to make admin changes (install/un-install)

- The machines boots over LAN

- They do not block the Secure Server

- The local computers use a old version of McAfee

- The servers are running windows

- The switch is not passworded ATAL

------------------------------------------------------
From what i know they do not shut-off their power or internet, as they host the website locally.

Would it be best to find a way to inject the RAT to the server that the computer boot the windows from? or to have a little arm computer running hooked up over Ethernet somewhere in school?

UPDATE #1:
Thanks for the reply's guys I can log onto a computer where i perform the bug and gain local admin access, but still not modify anything on the servers, you need an admin account for that, but i do know a friend who has admin rights on his account, Due to the computers booting a fresh version of windows every time it boots, i would need to spread the RAT into the server that the computers boot from, and hide it somewhere in there itself, I can run stand-alone .exe's on the local computer, i will try putting an autorun onto a memory drive along with some other work, and see if i could get my teacher to plug it in, thanks for the help and i'll keep you all updated!

Feel free to post ideas/help!

[King Cairo]

You can always upload the RAT to a site then go to the school computers and download it from there?

[4861636b]

You can't put a RAT inside of a WHOLE network of computers. But if you mean how to put it on single computer then do this.

Make a RAT and everything at home.
Bind it with an image file or something.
Put the RAT onto a USB.
At school, plug the USB into a computer.
Open the RAT.

Hope it works ^_^

[3SidedSquare]

You can't put a RAT inside of a WHOLE network of computers. But if you mean how to put it on single computer then do this.

Make a RAT and everything at home.
Bind it with an image file or something.
Put the RAT onto a USB.
At school, plug the USB into a computer.
Open the RAT.

Hope it works ^_^

Please take the time to make sure you understand what you're talking about before trying to help.

"You can't put a RAT inside of a WHOLE network of computers. But if you mean how to put it on"
Yes it can.

Also, you need to escalate your rat's privileges, it's not just magic software that'll do anything.

More on-topic; try different programs to see they provide some flaw that was overlooked.
(at my school, we have access to 7-zip, which is always run with admin privileges. From there, we can run any .exe, find files in normally restricted paths ect.)

Do you know if teachers have some elevated privilage?
(If a flash drive has a file called autorun.bat, it will be executed as soon as you plug the flash drive in. This could be blocked via security settings)

Have you tried to do a live boot?
(Boot into an operating system other than windows from a flash drive or CD)

Best of luck :blackhat:

[4861636b]

You can't put a RAT inside of a WHOLE network of computers. But if you mean how to put it on single computer then do this.

Make a RAT and everything at home.
Bind it with an image file or something.
Put the RAT onto a USB.
At school, plug the USB into a computer.
Open the RAT.

Hope it works ^_^

Please take the time to make sure you understand what you're talking about before trying to help.

"You can't put a RAT inside of a WHOLE network of computers. But if you mean how to put it on"
Yes it can.

Also, you need to escalate your rat's privileges, it's not just magic software that'll do anything.

More on-topic; try different programs to see they provide some flaw that was overlooked.
(at my school, we have access to 7-zip, which is always run with admin privileges. From there, we can run any .exe, find files in normally restricted paths ect.)

Do you know if teachers have some elevated privilage?
(If a flash drive has a file called autorun.bat, it will be executed as soon as you plug the flash drive in. This could be blocked via security settings)

Have you tried to do a live boot?
(Boot into an operating system other than windows from a flash drive or CD)

Best of luck :blackhat:

Make sure you know what I was talking about.

Firstly, that's a trojan, not a RAT.

Secondly, you can't infect a router with a RAT now can you?

[3SidedSquare]

*Mu Post*

Make sure you know what I was talking about.

Firstly, that's a trojan, not a RAT.
Secondly, you can't infect a router with a RAT now can you?

Are you trolling? I hope you're trolling.
RAT = Remote Access/Administrative Tool/Trojan

Although you can't infect the router, the computer you infect can infect the other computers over the same network.

[4861636b]

All RATs are trojans, true, but not all Trojans are RATs.

And please explain how thats possible?

[3SidedSquare]

All RATs are trojans, true, but not all Trojans are RATs.

And please explain how thats possible?

The trojan is just the attack vector, the rat the payload. A rat can spread across networks useing this method to put itself into the startup directory. Every time the computer turns on, the RAT is started.

[deadrising]

Why not use a worm after infecting one system to have it spread to the others ?

[lux]

Thanks for the replys! Updated OP