[prmaccts]

To gain access to ("hack into") administrator privileges on a school computer, just follow the steps below. While these activities are not condoned by this thread, it is important to know your enemy.

Steps

Method 1

1The Trophy. The goal here is that it doesn't work to gain access to an administrator account. Doing anything malicious or damaging is illegal and unethical, so please don't! The ethical thing to do would be to find a way into the system through cunning and intelligence, and only make it obvious that the system has been compromised.

If you can access cmd.exe, then change the password of an Admin, and change their personal settings, and be awesome to change the wallpaper to something humorous (if you can't, open Notepad and type in the following to get a something like a copy of it:

@echo off
cmd
echo on

or type in "start command.com" Save as a batch file and change "Save File as Type" to all files; do not save as txt.
2Scope out the battlefield. See if the command prompt or the registry is enabled on student accounts. With these enabled, you'll have quite a bit of power.
3Procure an administrator password. It depends on who you are dealing with, as does the last instruction: if they're intelligent, you'll never get near one, if they are not so sharp all you have to do is wait, or type in cmd (net users administrator *)
4Practice reading people's keystrokes with a friend, regularly have "problems" with your account during class requiring the teacher to log in, etc. etc. If an administrator or teacher leaves themselves logged in, see what you can do while they're gone. If it's an admin, find the remote desktop connection to the server and copy it to a place where you can access it on your normal account. This is a file, hopefully with the Admin's password saved on it, that will connect to the server, allowing you unfettered access to the network. Again, tweak a few things, etc., don't destroy anything.
5Social Engineering is the single best way to access a system, or so say many. It often requires no techy knowledge to instigate, but the more you have, the better. For example, leave a USB stick beside the teacher's computer in the computer-room/library/classroom, with an autoexec file that compromises the account in some way, similarly you can doctor a USB mouse to contain a USB drive with a similar autoexec file. Write a program that looks like the login screen, or some login screen that your Admin might use, and ask him to enter their password. The possibilities are endless.
Social Engineering can be really handy, the more you know about someone, the better it is. Just get to know every little detail about them, personal details (telephone number/email-address etc), hobbies, likes/dislikes; just everything! And you will be able to guess the password eventually, or get the person to say theirs because they trust you enough...bingo!

Method 2

If you want to crack the Administrator account using software, follow these steps. It might be easy, but it isn't fun.
1Download pwdump to the computer that you are using. If the site is blocked then you should download it to a thumb drive and put it in the computer.
2Right click in a any folder and then New>Text Document.
3Open it and type "command.com"
4File>Save As and save is as something.bat.
5Double click on something.bat.
6Navigate to the pwdump folder using CD the location of pwdump.
7Type -o hashes.txt localhost email hashes.txt to yourself or put it on your thumb drive.
8On your own computer Google-install ophcrack and follow one of the guides.
9Click load pwdump file and locate the text file to load the hashes.
10And you cracked the administrator.
Method 3

If you are unable to get the admin password with windows ophcrack then try these steps.
1Download the ophcrack live cd iso.
2Burn it to a cd.
3Place it in the computer you want to hack and set up the computer to boot from cd. You can set this up in the bios set up.
4Boot from cd in graphical mode and ophcrack will attempt to crack the passwords automatically.
5Note: if the cd is unable to find the password, this is because the admin password contains a special character. This means that to crack it you must first download the rainbow tables named xp special or vista special. The only way I know how to do this is through a torrent. Then you must put them on an eternal hard drive and use them with the live cd.
6Enjoy the password but DO NOT do anything against your schools wishes with it.

Method 4

Open Run and enter {cmd} then open it. Once you open it, type {net user /add } and type a username, put a space and type your easy-to-remember password. Enter it into the prompt and log off. Now you can log onto that file without anyone knowing that you are now an administrator.
Have fun with your restrictionless account! It's literally restrictionless because you're an admin!

Method 5

Another method which does not grant you server access is to make your self an admin.
This works on Mac's have yet to try a PC
1Boot the computer into single user mode (hold command + s while booting)
2Let it scroll through the lines of text
3Type

sbin/mount -wu
sbin/SystemStarter
passwd root

4Now type what ever password you want/ can remember and hit enter.
5Type

reboot
6It will auto reboot the system when you get to the login screen use root as the lgoin in and your new password and viola.

[kannan]

Very Nice Brother,l was searching for this type of a thread

[tortor]

Good tut i'm sure, sorry, but i need 5 posts to PM

[whysoserious]

great thread man,i'm searching for this kind of thread only man upload more of this kind .........

[Zyrakion]

Lol dosen't work for my schools computer , I got error saving the document.

[1llusion]

Well, if they are smart at least a little tiny bit, these things won't really work since you need admin permissions.
Same goes to booting up different system.

At my old school, we had a real tough system. I have never gained root aces to any of the servers, but I was close to it (the thing was, they were logging everything and patching it, so I had to make new methods every day. They knew it was me, I knew they are watching, it was just a fun game)

Anyway, my methods were sort of:
-Hacking into the printer and whenever somebody accessed the printer, I sent them my payload.
-Disconnecting school wireless and setting up my own rouge wireless which bridged the connection to LAN
-ARP spoofing
...
...
...

[david_z1]

Good tut bro.. Thanks a lot for this shizz

[HrDe]

make it good and clean in read, only 4th method i understand. I m using Hiren Boot CD for break admin account.

[hacxx]

Please update the thread.

[Onew1971]

wow, muchas gracias por esto, llevaba buscandolo mucho tiempo, me has ayudado mucho ya un par de veces muchas gracias en serio