Old Novell Netware flaws...

In case somebody thinks this is in the wrong place, whatever, it made sense to post it here.

My school runs on Win 95 machines, each of them with Novell Netware 3.3x on them. One day I forgot my password and decided to test the system. After a bit of fiddling around, I found you could hot-open the Tasks menu (on the computer, the combo was Ctrl+Alt, then Win key) and run programs from there (albeit slowly). I'd even have net access from this method! Near anonymous net access! I've tried this on a number of other terminals, but the hot-key wasn't the same. Anyone know other ways to bypass 3.3x or other combos for the Tasks box?

PS: Dont call me lazy for not going to the admin to get my pass. That's not really the point of hacking (well, in this case, otherwise I would of never found this; Also, can somebody tell me how to *edited from previous* access locked controls like Display (no stabby please) , some terminals are really messed up in the rez...)

Hmmm

"Novell 3.3 + Win95"

You will never be a hacker..............guess you will be in an old folks home before you catch up :D

What you must remember is that Win95 is a stand alone desktop OS with some networking capability? It does not compare with NT from a security aspect. What I think is happening is that you are running on your local machine (which I seem to recall caused a considerable delay) and might be able to make limited network connections?

As for screen resolution: on the desktop, stick the cursor in a free area and right mouseclick, then select <properties> from the pop-up.

Cheers

www.google.com my boy www.google.com

maybe I should clarify...

the machine is running Win 95 (or some variant... 98 or me, but most likely 95) however its using a NetWare login prompt

As for the r-clik, nice idea, but don't u think i didnt try that?

Next in line, don't judge or insult (reference to that "never a hacker" thing) without proper evidence; that brings ppl with torches to your door (or vice versa, if i was a hideous green monster with a speech impediment).

Anyways, that was kinda off topic, your last post, but i guess it was due to inadequate info. Now, with that out of the way, could you at least help me with the tasks problem?

to !: ive been running through google the past couple of weeks and im quite tired of the junkers popping up every ten links, so thats out...
...
...
At least for a week...


Edit: NetWare prompt blocks the r-click thing, not really a problem...
Edit again (twice in a row on two different boards...): The comps are running Win 95
-----------------------------------------------------------------------------------------------------------
Edit hopefully for the last time: some people took this thread as a threat. I'd like to mention I was trying this to fix the numerous flaws in the computers created by user abusion (the resolution problem), and usually, in my case, always, my pleas for assistance go unnoticed by EVERYONE and therefore leave me to go out and repair the problems. I only really keep this backdoor for the other benefeits so I can handle the repair instead of waiting until next year to have the problem fixed ONLY to find more computers wrecked, my backdoor shut off, and the admin shunning me, as well as me outta the class for which i asked the maints for, meaning i dont recieve the benefeit for which i asked for, which means i'd just be better off doing it myself, so to the people whining at me, dont, its just wasted breath. For those against me for acting as a hacker, that sorta kills the point of being a SECURITY BOARD.

Got tired of edits; now im expecting some flames flying at me, so just hold it, help me, and ill be on my way for a while. Thank you (to all the understanding people).

Quote:

---

Originally posted here by Chronomaster
Got tired of edits; now im expecting some flames flying at me, so just hold it, help me, and ill be on my way for a while. Thank you (to all the understanding people).

---

Flames? For what? When you sat there at the computer and decided "What the hell, I don't remember my password...Hmm, curiousity giving in, oh look I discovered something without my book"

that was appluadable. You should have stayed with that. But when you went on to ask about picking the admin locks.... That's where you left us. Well me anyway. You have that hacker's curiousity, now use it for something good.

Become friends with the admin. You don't need to be accessing things they have locked up. If it's locked up, leave it that way. BUT, go and play with the lock, if you can get it open, go tell the admin about it.

Discovering security holes, wether some like it or not, is hacking. Well a form of it anyway. The admin for my college is in a class I take, and we get along just fine. My whole set of school mates and teachers all know what I like to do in computing, but not only do they tell me they trust me, but one of my teachers said if I got into trouble at school for something hacking related, he would get me out of trouble and say it was for a project.

They trust me and know I won't do something stupid. and if I do break something they also know I would be there to help fix it. I'm also very good friends with the student admin guy. He's a Debian Linux user and we talk when we get a chance.

We talk about alot. Just tonight I was drooling over an old UNIX manual we have at school, and he was telling me some of the other things we have. We have a couple of older machines and the books for them and I love it.

My teacher let me borrow an older book tonight that I found on the shelves in my classroom. We have about 50 Novell books up there, some old MS-DOS 6.2 manuals, still in the wrapper, and a book called "UNIX for DOS users". Which is what I burrowed.

Instead of leaving this website because some people don't like your learning style; Howabout staying and learning with us? Also, go tell the admin how you were able to run things without logging in.

Unless the admin is a complete **** up he may appreciate the heads up. Also, try talking to him or her, they may appreciate a student actually caring about learning technology. You may even be able to do what I did about 2 years ago; Be the computer helper.

Instead of calling up some techs, they would call me out of class to fix things around school.

I don't see why you were flamed for wanting to fix the display. Most school machines are runnin at like 1024x768, with the screen size at about 800x600.

---God pulls a miracle, and now I feel wanted---

Thanx for killing that bad feeling for me, I sensed a little apathy heading my way, so thanks. I live down in Georgia, so there's no real computer sociality here. I once announced I was a hacker in 2-3 different classes, and I got the same result: one hell of an uproar, with the teacher in shock; now just imagine if I walked up to my admin, him with possibly the wrong idea (def.) of a hacker; i'd have the rent-a-cop in my school on my ass like... a rent-a-cop at my school on my ass.


I'll try to talk to him, hopefully i'll get some attention here (and some experience, working on the same terminal isn't working for me), as for the flaw, ill decide on whether to keep that to myself by surveying the tech-savy in the classes I *try* to use it in, if there are any...

Speaking of terminals, I have a laptop with a fresh install of Debian. The motherboard is from SiS and I can't get X to work (screen does a wierd burn-in from green to purple). Anyone care to give this one a shot, even if its off topic...?

--------------------------------------------------------------------------------
Lesson for the post: Don't judge someone new by his post... please don't.


Edit (off topic, and yet again another edit): Got any distro suggestions ever since Red Hat closed off its consumers, I need something good, so I thought Debian would be a good way to go.
-----------------------
Edit, for those giving me the negative points: Geez, lamers. Can't take an idea? Maximum Security is CREATED by hackers exploiting flaws. Otw, we'd live in an microsoft world, with a single foreigner breaking our windows with the baseball bat of DoS. Honestly, it's like they're scared of me and they...
1. Want to kill me.
2. Want me to kill them (which, of course, I will not do...)
Please, people, have some trust in what I say, and stop trying to stab me all cloak-&-Dagger like; post it in public if you got a problem...

I think what people here did NOT like was the whole break into the admin thing you said. I really doubt any of them read WHAT you wanted to break into. The words "Break into admin" usually set off the warning flag on here. I went ahead and read the rest of your post though.

I go to college, and in college, high school...Any school, the resolution is always ****ed on those for some reason. I see no reason why you got such a bad reaction. If people actually read what you were saying I doubt you would'v been negged so bad for it.

don't take the bad reaction as something that everyone at AntiOnline acts like. Not everyone is like that. But, you should click on the edit button on your post, and edit the part off where you talk about breaking into the part where you can change the resolution.

If you ask the admin if you can fix the resolution, most won't have a huge problem with that. also, if you're looking for a good Linux dostro, go to http://;www.suse.com and look around there. If you have a Best Buy near you, you should be able to find it there for a decent price.

The SiS problem is mainly I think because it is more of a Windows style of hardware. Well at least that is what I get from the fact that the Sis cards in this Pc are integrated ****. Which is why I bought an Nvidia 128 MB card for this.

If you don't have a way to get money for SuSE Linux, go to http://www.linuxiso.org and check out Libranet Linux. It is a Debian based distro and is awesome. also, Mandrake Linux is also great with hardware.

And remember; Slackware is there too ;) If you liked Redhat Linux, go for Fedora, it's MUCH better. No stupid signing up for an account.

For good Linux and BSD distros in no particular order:

SuSE Linux.

Libranet.

Slackware.

Free BSD.

Mandrake.

Fedora.

ASP Linux...Which I am installing right now.

http://www.linuxiso.org

Go look around there. They have ALOT to choose from.

Fedora's free, er, I can get it (lack of page-sleuthing apparent here)???

Besides that... hmm...
...
...
...
Right, Tasks, does someone know how to open it with other hotkey combos?
Right...
OH!!! I'd really be convinced that not everyone here is a fLamer if they all weren't in the senior range
PS: Dont take the lamer part seriously by bombing me anymore; thats what makes everyone think you're an ass... And a forewarn, i'll start posting the bombs with the name and word-for-word reason (or lack thereof) with my posts. Hopefully the message'll get out...

Quote:

---

Originally posted here by Chronomaster
PS: Dont take the lamer part seriously by bombing me anymore; thats what makes everyone think you're an ass... And a forewarn, i'll start posting the bombs with the name and word-for-word reason (or lack thereof) with my posts. Hopefully the message'll get out...

---

That's just going to get you some negs with some really funny reasons so that when you post them everyone laughs. Back on task, I don't know of any other hot keys to get to the tasks. Sorry.

I think everyone has their opinion and though on whether to neg or pos you, i felt like negging you because you "broke" into admin mode without him knowing, you can find holes on your home system and also by telling him what u r looking for, if he doesn't allow you then don't do it. Find someplace else to try your hacking techniques.

Quote:

---

I think what people here did NOT like was the whole break into the admin thing you said.

---

Yes that is the part, and im also sorry, i shoudln't have negged you since you are new here and still don't knw how it goes on AO.

Whew, a neutral response...

Well, at least you responded to one of the key points of the article instead of blamming me for being a hacker. Thanx.

Edit for above: heh, its kinda hard to reproduce the same environment with my limited resources, and time to boot. You apoligized too, so thanks.

also if you didnt looka t this already.

http://www.geocities.com/ian_springer/winkey.html

more

http://www.google.com/search?hl=en&l...ndows+hot+keys
http://www.google.com/search?hl=en&i...otkeys&spell=1

Hmm, then why was the hotkey changed for the one term i did it on?

And thanks (more of it to go around).

It might help if you read what people said to you before reacting?

My comments on you not making a hacker were based on the Novell/Win95 environment you described. You may learn something from this......but it won't be a lot, because it is out of date and unrealistic when compared to actual environments used today (other than in your school, where it is probably considered, "good enough" because they are not teaching you security?).

And remember it was you who mentioned "hack" not I ;)

You really need to try to get hold of a pair of ex-corporate machines, at least one of which runs Win NT4, so you can practice on an OS that has some form of security mechanism. These do not have to be of any great spec. because speed and volume are not issues when you are learning.

You will not learn very much about security from your current environment, which will leave you further and further behind in the real world, unless you do something yourself, or wait until you go to college?

As to whether you had tried a right mouse click? how should I know, you did not say. The most obvious way to alter system settings is through control panel, which I can well imagine your Admins have blocked.

Over here in Europe we have very strict Health & Safety regulations which require that people using computers be able to adjust their environment to their own personal comfort. This means that right mouse click is generally allowed, even though the start menu options are severely restricted (like you can't get into control panel).

You say that the screen settings are screwed up? this seems a little odd if no-one can change them. Your school is really at fault there, as getting yourself comfortable is very important if you are to concentrate and function effectively?

I would follow Gore's advice and ask the Admins. Everyone should be able and taught how to set up a workstation to suit themselves, then it would not be an issue?

I have worked on networks (a long time ago) where if you disconnected it from the network it allowed you to boot locally into Windows. You could then plug it in and obtain limited access, of which internet browsing was one. You could not get into most of the servers though.
As I recall that was a Novell and Win3.1x environment. I guess that your "hotkeys" have somehow bypassed the network login part of the boot cycle on your workstation. I certainly do not recall the sequence you mentioned, so it could be that particular machine had a problem (it all sounds pretty old?) and the effect was a coincidence. Unless you tried the other machines much later, and the Admins had blocked the hole in the meantime?

Good luck

EDIT: I have tried a Win98 and WinMe machine. Just hitting either windows key brings up the start menu. If you go into your desktop and left mouse click in a space (to ensure that nothing else is selected) then hit the key between control and windows on the right side of your keyboard you should get a pop-up menu, the last item of which is properties.

Yeah well, I gess i was at a fault for the whole "hack" thing... or something. Just a fault on my part.

I tried the backdoor on some other computers with the same login prompt (using my discovered hotkey and the one Mem helped me find) and nothing came up. It makes me wonder if that one computer had that one flaw. Well, time to experiment some more.

As for the whole display thing, you may have it in Europe, but I live in America, and in America, no one wants us to turn up the resoultion of our life to see more things, only the things they want us to see. Seriously though, they (USA) should go with the adjustable environment idea, but it does kinda make sense to shut it off. All it takes is one good placed 80 Hz to the monitor to blow it, unless they set the refresh rate limit.

Update on the admin thing. I can't seem to find the admin in my school, maybe he doesn't go to the school on a regular basis. The teachers wanted me to handle the request with them and not him/her.

And i never noticed the props when you use the menu button. I kinda think itll still be locked... I got too much stuff to do tomorrow...

Hey, what games do you think I can get to run on low end pcs? They're old IBM terminals, all running win95, probably somewhere around 233-300 MHz and onboard video controller. I was thinking about getting a lan party running for my school's Game Club and i need some good suggestions.

Edit: Them as the teacher and him/her as the admin

Hi Chrono,

The other alternative is that an Admin might have unblocked the particular PC you were using and forgot to reset it?

Shame about the screen setting thing, but it is possible to alter the boot up instructions with a command line that resets the resolution and refresh rate. I have not done that for many years, but it would be possible to create a script that would only allow settings that the Videocard/Monitor would support.

A thought in that direction, do you know if the machines are set up for "default monitor" or a specific brand/type? The default monitor thing really is a pain. I just fixed a pal's machine with that...told the system it was an IBM G54 and now it will allow 32 Bit colour and a refresh up to 95Hz. It was 16/60 on the "default" :(

I also thought that your hardware is rather old, so the electron scanning guns in the CRT may have wandered off alignment? In other words the screens themselves may need some attention?

As for games.....not really my area of expertise, but I would like a bit more information on the tech specs of these IBM boxes. You say 233-300 Mhz? are they PI or PII?.....the real question there is will they support MMX, and what level of DirectX will they go to. What is the RAM in them? Can you give us your inventory and specs, could be you can set up a system with the "best" machine hosting the LAN Party? and the others logging into that.

Also, what are the "onboard video specs" I would guess anything between 2 and 8 megs?
I think that we need this to make sensible suggestions.

Cheers

Doesnt really matter, even if i knew it, cuz, of course, games arent allowed at school, even for special purposes. Heard it from my friend, who's the prez of the club, but im gonna check cuz im gonna try to run a SVC2 tournament

back on tournament *err, topic*, whats that about this script, and where can i get one?

PS: Who thinks AO should have an iTunes plugin?

EDIT: I meant what about the script; I know what they are. I also meant where can i get it.