windows tricks 2009

Getting in at startup

Okay, so you’re trying to boot up a computer, but it’s password protected! What can we do now? We can do any number of things. I will cover 3 ways to get in here though.

First: Break in from prompt
The first way discussed here is by breaking in using ms-dos. You can either restart in ms-dos mode or when Windows is starting up hit the f8 button. The f8 button may or may not work depending on if the owner configured his system right. When you hit the f8 button you should get a list of ways to boot up. Chose boot up in MS-DOS mode. Once DOS is loaded type “cd c:\windows”. Now type “rename *.pwl *.npa”. Once you’ve done this reboot the machine. When it asks for a password enter whatever you want. What you did was rename the password file so Windows rewrites the pass file when it asks for the pass. Now you can go back into DOS and type “rename *.npa *.pwl”. Now everything is the way it was when you found it. The really cool thing about this concept is that most people don’t think to see when a file was last edited .

Second: Boot into safe mode
When Windows is booting hit the f8 key like you did above, but this time chose boot into safe mode. I know everything is ugly, but you have almost complete control of the system. I’ve had to use safe mode when I almost destroyed my computer a few times .

Third: Get in regular mode with no pass
When you boot Windows up, and you see that annoying login form. You don’t know the password, and you don’t feel like booting into safe mode or ms-dos mode. When the window pops up asking you for your login and password hit the keys “shift+escape”. Windows should now go on as planned. Note: (Make sure you log out when done. They can see that you didn’t login with a name. .


Changing the boot up pics to whatever you want
Well this is really not that hard. I guess Microsoft thought they could hide the files from people. All you need to do here is open up ms-paint by way of the accessories. Once it’s open click File then Open. Go to the C:\ directory and open the file “logo.sys”. Now that it’s open make sure you don’t make the picture any wider or change any of the attributes. If you do change the attributes you could damage the files. Okay now that you’ve made your startup screen the way you wanted it. Let’s edit the “Windows is shutting down” screen. Click file then open, and go to the C:\Windows directory. Open up logow.sys now you can edit away on this one. When you are done editing that file you can edit the “It is now safe to turn off your computer” screen by opening logos.sys in the C:\Windows directory.


Fun with the screen saver
Here is an interesting little trick. Right click on the desktop and go to properties. Now go to the screen saver panel. Chose the 3d text for the current screen saver. Click settings, now change the text to “volcano” without “s. Watch names of volcano’s appear on your screen.


MS-DOS tools
Tracert:
Usage: Trace the route of an ip on a network.
Example: tracert somebody.com

Ping:
Usage: Check for down computers on a network, or checking how well the computer is doing.
Example: ping somebody.com

Telnet:
Usage: Connect to a TCP port on a remote host.
Example: telnet localhost 25

Netstat:
Usage: Show open ports on your computer. You can see if anyone is connected to the port also.
Example: netstat –a

FTP:
Usage: Connect to a remote FTP server.
Example: ftp downloadfrom.com

Route:
Usage: See if you can figure this one out : )
Example: route

Arp:
Usage: See if you can figure this one out : )
Example: arp

Choice:
A good tool? Nah : ) I was browsing around one day and found choice.exe. Have some fun with this lol I did huh… I better get out more
Example: choice Want to play a game


Telnet
First off we will cover how to connect to a shell server. The simple command you run in ms-dos prompt or in the run window is “telnet host 23”. This basically means open telnet to the address host on port 23 (the standard telnet port). Once you connect you should get a prompt like this…

Mandrake Linux 7.2

login:

I know that’s not what it really looks like, but you get the idea. When it comes up with “login: “ you enter your username. Once you enter a user name it prompts you for a password.

Mandrake Linux 7.2

login: root

password: ********

Welcome!
[root@localhost /root]$

That’s what it would look like roughly if the login succeeds : ). However if it fails you get something like this.

Mandrake Linux 7.2

login: root

password: *****

Incorrect Login!

login:

You can normally enter a wrong password three times before it kicks you off the system. If you don’t have a username and password then you can sometimes guess them or crack them. You can also exploit a vulnerability say on SMTP. I don’t advise you doing so though . Once you are logged in you need to know how to run linux commands. I will cover some more commands in another tutorial some day, but here a just a few.

cd - change directory (example: cd /home)
ls - LiSt the files in the current directory.
pwd - show the current directory. (example: pwd) returns “/home”
more - display the contents of a file. (example: more passwd)

I know you can’t do much with just those commands, but you get the idea.

Spoofing emails
You can also spoof emails with telnet. Go into MS-DOS and type “telnet host 25” (port 25 is the standard SMTP port). Once you login you should see something like this

220 logs-wl.proxy.aol.com ESMTP Sendmail 8.10.0/8.10.0; Tue, 17 Sep 2002 17:33:34 -0400 (EDT)

Once you see that type “helo ”. The server will respond with a nice greeting message : ). Now type “mail from: ” then “rcpt to: ” now type “data”.
You can now start entering the body of the email. Just put a “.” on a line by itself without the “s. If you want to include a subject then right after you type data type “Subject: subjectdata”.
The tool on the site will automate this process, but you have to specify the server to use.

Browse Web Sites
Okay open up MS-DOS and type “telnet victim.com 80” (port 80 is the standard web server port). Once connected you won’t see a prompt. You just start entering commands from here. To get the mainpage on a server type “GET / HTTP/1.1 (enter enter)” don’t type enter enter, but hit the buttons . So for just browsing a web page with telnet type “GET /page HTTP/1.1”(enter enter) I don’t suggest doing this with telnet because it auto disconnects because HTTP doesn’t maintain a connection until you are done. You can download the HTTP tool from the site and browse with that.


FTP
Once again open up MS-DOS this time type “ftp site”. After it connects you should see a message like this.

Connected to site.
220 site FTP Server ready
User (sitenone)):

Once you see this type in the user name “anonymous”. It will now prompt for a password. You can either enter a fake email or none at all just test to see which works. You will then see a message like this.

230 Anonymous access granted, restrictions apply.
ftp>

You are now free to browse their site as you wish. Some people even give write access to anonymous (on accadent).

Useful Commands
ascii – change mode to ascii for transfers. (Use this when downloading/uploading text files.)
binary – Change mode to binary for transfers. (Use this when downloading/uploading executable files.)
bye – Exit.
cd – change directory.
delete – delete a file
dir – dos style file listing.
get – retrieve a file.
help – display help for commands.
lcd – change the local directory.
ls – list files/folders
mdelete – delete multiple files
mdir – list contents of multiple directories
mget – get multiple files
mkdir – make directory
mput – upload multiple files
open – make new connection
put – put a file on the server
pwd – show current directory
quit – exit
quote – send a specific command to the server
recv – get a from the server
remotehelp – get remote helpfiles
rename – rename a file/dir
rmdir – delete a directory
send – send a file
user – change login name