8

I used to work in a Tech Support department where everybody was constantly pranking each other.

In one of the iterations of such events one of the guys actually forked the source of a login page, in one instance of the app that was running in a VM, and edited the code so it would redirect the user to a lemon party'ish website.

It was quite an upgrade to the old M.O. where people would just email themselves messages with seemingly bureaucratic call to actions containing hyperlinks to the same lemon party'ish websites.

And the most direct approach, which is to type those directly into one's browser if the laptop is left unattended & unlocked due to a trip to the toilet.

Comments
  • 6
    hosts file DNS entries.
    Apache url rewrite.
    Custom DNS running on a raspberry pi.
    Browser extension.

    So many options 🙂
  • 4
    I do like the VM scenario. Props.
  • 2
    @Root how about piping SMTP instructions into netcat to send an email from someone else's address asking them to click on the link to check "a report"?
  • 3
    @themarcelor I like this. 🙂
  • 1
    Just take a screen shot of there desktop, hide all icons and set it as their background.. profit
  • 5
    I'll just leave this here: http://fakeupdate.net/

    1. Enter that site
    2. Choose correct os
    3. Full screen

    Enjoy the ensuing swearing when mr or mrs victim returns
  • 0
    @Hakash This is brilliant! I wish we had something like that back then
  • 1
    @themarcelor Thanks! Another favourite of mine is attaching one of those micro transmitters for wireless mice and keyboards into the back of the docking of the victim. Then, randomly throughout the day, sligthly move the mouse when they are moving it to make them miss 🤣

    Bonus: hitting a few random keys when they are typing
Add Comment