61

The stupid stories of how I was able to break my schools network just to get better internet, as well as more ridiculous fun. XD

1st year:
It was my freshman year in college. The internet sucked really, really, really badly! Too many people were clearly using it. I had to find another way to remedy this. Upon some further research through Google I found out that one can in fact turn their computer into a router. Now what’s interesting about this network is that it only works with computers by downloading the necessary software that this network provides for you. Some weird software that actually looks through your computer and makes sure it’s ok to be added to the network. Unfortunately, routers can’t download and install that software, thus no internet… but a PC that can be changed into a router itself is a different story. I found that I can download the software check the PC and then turn on my Router feature. Viola, personal fast internet connected directly into the wall. No more sharing a single shitty router!

2nd year:
This was about the year when bitcoin mining was becoming a thing, and everyone was in on it. My shitty computer couldn’t possibly pull off mining for bitcoins. I needed something faster. How I found out that I could use my schools servers was merely an accident.
I had been installing the software on every possible PC I owned, but alas all my PC’s were just not fast enough. I decided to try it on the RDS server. It worked; the command window was pumping out coins! What I came to find out was that the RDS server had 36 cores. This thing was a beast! And it made sense that it could actually pull off mining for bitcoins. A couple nights later I signed in remotely to the RDS server. I created a macro that would continuously move my mouse around in the Remote desktop screen to keep my session alive at all times, and then I’d start my bitcoin mining operation. The following morning I wake up and my session was gone. How sad I thought. I quickly try to remote back in to see what I had collected. “Error, could not connect”. Weird… this usually never happens, maybe I did the remoting wrong. I went to my schools website to do some research on my remoting problem. It was down. In fact, everything was down… I come to find out that I had accidentally shut down the schools network because of my mining operation. I wasn’t found out, but I haven’t done any mining since then.

3rd year:
As an engineering student I found out that all engineering students get access to the school’s VPN. Cool, it is technically used to get around some wonky issues with remoting into the RDS servers. What I come to find out, after messing around with it frequently, is that I can actually use the VPN against the screwed up security on the network. Remember, how I told you that a program has to be downloaded and then one can be accepted into the network? Well, I was able to bypass all of that, simply by using the school’s VPN against itself… How dense does one have to be to not have patched that one?

4th year:
It was another programming day, and I needed access to my phones memory. Using some specially made apps I could easily connect to my phone from my computer and continue my work. But what I found out was that I could in fact travel around in the network. I discovered that I can, in fact, access my phone through the network from anywhere. What resulted was the discovery that the network scales the entirety of the school. I discovered that if I left my phone down in the engineering building and then went north to the biology building, I could still continue to access it. This seems like a very fatal flaw. My idea is to hook up a webcam to a robot and remotely controlling it from the RDS servers and having this little robot go to my classes for me.

What crazy shit have you done at your University?

Comments
  • 13
    Our school had incredibly fast internet and the computers ran windows. Sad thing was this connection was available only to the admin user and not the students. Fast internet was really rare and expensive (This was 3 years ago in India). I was just discovering Ubuntu and the world of Linux back then and learnt that you can install Ubuntu on a pendrive and when you plugged it in, you could use the host computer's resources. So I did exactly that.Gained full access to the internet and no site was blocked. Used all that power to torrent stuff. The download speeds were crazy (almost 1 MB/s).
    I think schools just don't care about security much.
  • 10
    Not me but someone I knew wrote a script that overrode the limits on how much print jobs we were allowed a semester. Pretty soon people were printing whole textbooks.

    The other thing we did which was a lot less hi-tech - we jammed the back door to computer lab so we could break in in the middle of the night. To finish up our homework/projects.

    Come to think of it, all the rules we broke were so we could get more shit done.
  • 9
    I just installed keyloggers on my teachers PCs,
    Used floppy to get nice screensavers to our home pc from my teachers computers.
    Using floppy to get missing DLL files to enable mspaint to work in Windows 95.
    Found all the printers in the municipality and printed out thousand of papers on every one of them.
    Found out that they Did not disable the chat function in Novell so I could send popups to every single computer in the municipality causing the network to almost crash.
    Connected two different ports on the same switch causing network outage in our school for 4 days
    Created .bat files with shutdown -L on computers without smartcard and no option to boot into failsafe.

    I DID THIS BEFORE MY AGE WAS 10
  • 2
    So firstly our school has only one small wifi AP in the whole building and you can only access Internet from there or their PCs which have restricted internet with mc afee Webgateway even though they didn't restrict shuting down computers remotely with batch files with shutdown -i.
    The next stupid thing is cmd is disabled but powershell isn't.
    But back to internet access: the proxy for this is permanently added in these PCs and you don't havs admin rights. Although this can be bypassed by basically everone because everyone knows one or two teacher accounts, its still restricted right.
    So I thought I could try to get around. My first first few tries failed until I found out that they apparently have a mac adress wthitelist for their lan.
    So I just copied a mac adress of one of their arm terminals pc and set up a raspberry pi with a mac change at startup.
    So I got Ip and so on with normal DHCP and Internet but port 80 was blocked. So I set up an tcp openvpn on port 443 on my server. 1/2
  • 3
    @davidmaerz And set my raspberry pi up to connect to this vpn at startup and provide a wifi ap with own ip addresses over this vpn.
    As a little nice feature I added a script for it to act as Spotify connect speaker.
    So basically I now have a raspberry pi which I can plugin into power and Ethernet and an aux cable of the always on speakers in every room.
    And have a 10mbit/s unrestricted ap and spotify connect speaker.
  • 6
    High school biology class, I disguised a meterpreter reverse shell as a Word file. When I went to hand in my assignment, the professor opened it. It showed an error, I said it's from another Word version, gave her the real file and proceeded to silently download all her PowerPoint files to my phone. Since all she does is read off the slides, I never had to listen in class again.
  • 2
    @theDatron is 1MB/s that much? Where I live is something normal to have 1GB/s
  • 1
    @Kernelovic Nowadays it's pretty common but 3-4 years ago it was rare.
  • 1
    Where I live 1MB/s is still rare and expensive for most normal users.

    I own a 2.5MB/s myself.

    1MB/s == 8Mb/s
    1Byte == 8bits
Add Comment