[fastrnyou]

Say this whole thread is a Hypathetical thread

And say you had a network, and say that someone was a work at home.. person, that uses VPN thru their DSL to connect to our network.

What setting on their Hypathetical computer , would you need to have, or what programs would you use, or how could i remote into that computer?

This isn't for a malicious cause, but more for a prank that will not get me introuble.

Can anyone give me any pointers or directions on where i need to look to get the this computer?

Hypathetically. I know i can't spell so BACK OFF!

 

[Aerosly7]

Hypothetical, of course.

Many people running VPNs will use Back Office or a similar product. If that's the case, your easiest entry point will be to use Back Orifice which can be found at www.cultdeadcow.com .

If they're not using that method to access your network you'll need to find their IP address and access their computer that way. That kind of information should be available on your server. What kind of network are you running? Some kind of UN*X or an NT network?

For additional reference check www.2600.org . If you want to take a road trip this weekend, 2600's PhreakNic5.0 hackers convention is going on in Nashville Friday, Saturday and Sunday. (It just HAD to conflict with the Boone gathering. ) Might be worth checking out if you're trying this kind of thing.

 

[sorny]

Didn't know you was intro phreaking Keith. I'll be damned. I guess working for the phone company brought that on... or phreaking brought working for the phone company on

 

[fastrnyou]

its an NT and 2000 network, no Unix here... and they are using VPN... where could i find more out on "phreaking"

 

[fastrnyou]

ok, they use the VPN stuff that comes with windows 98, not any kind special program. What would i need to do to get in now? I can find there IP no prob, but what program is needed to get into their machine?

 

[sorny]

Hey Keith, I was checking out this PhreakNIC5 thing and it seems pretty damned cool. I didn't know anything about it... of course I haven't been to 26oo's site in months. Hell, it's free, I would kinda like to go if nothing else conflicts. Have you been before?

 

[JagdStealth]

the win98 VPN client??

ewwwww VPN sucks, we use it here at work an I'm dealing with its problems as we speak.

We use Cisco's client, so it's going to be different or I could probably walk you through a few tricks. If your trying to get access to their computer and your using a windows 2000 box, good luck.

just for shits and giggles...go to the run command and try and map into their IP address...if you've got admin rights it might work with windows VPN...

like this: \\172.30.36.44 (put in his IP there)
or you can try: \\172.30.36.44\c$ (The local drive if its shared)

make sure you know wether the IP you have is internal or external, it will make a difference...

 

[fastrnyou]

they are on a 98 box, have DSL, and a router. So the iP that i see in my software, is it the router software or the actual computers software?

 

[JagdStealth]

Your probably seeing the IP of the router. Basically what you described is this...

DSL provider uses a DNS server to assign an IP to its subscribers. Your friend has his DSL plugged into his router. That router takes the IP that DSL provides and uses it. Then you take 1 or 3 or 10 PCs and plug it into that router, the router then uses it's own DNS to give IPs to each of those computers.

Do you have admin rights to anything in the office? any of the servers or anything? If so you can probably find out his specific IP.

btw, I've got the same setup in my office (DSL>router>computer) and VPN just runs liek crap through the router

 

[JagdStealth]

if you can somehow find out the password to the router, you can probably log into it from the outside and get his IP address and at that point you'd have control over the router

 

[fastrnyou]

yeah, i've got admin privs to most everything here. Most of the computers here are 98se boxes, and 2 of our 8 servers are NT4 SP6 and the others are 2k.

Where do i need to start on this?

Couldn't i just enable file and print sharing on thier computer and use the name of the machine?

 

[JagdStealth]

While he is logged into your network, you simply could enable file/print sharing and use the name of his machine...

If file/print sharing is enabled and you have admin privlages, just simply type the name of his machine in the run command and you'll connect to his box...simple as that

like if you were on our network at my work to get on my computer you'd type: \\CRL1649\C$ and you'd be on my C drive...

this is assuming that on your network it is set to share out the local drive on default (it should be)

using his IP and all that fun stuff would work if he was NOT logged in to your network

 

[fastrnyou]

can you enable file and print sharing remotely? i doubt it but

There has got to be some simple way to get into his machine. If he is using the VPN connection that comes with win98 and just puts in the IP address of one of our servers, then puts in username and password to log on, then there has to be a way for me to access his machine, or use one of our servers todo so.

 

[JagdStealth]

There is no real remote way to enable file/print sharing...

there are plenty of ways to access his machine. You can get on his machine simply with the IP, especially if you have admin privlages. Using windows 98 to do so is the problem, it doesnt give you much flexibility or control...

 

[fastrnyou]

so what do i need to do? use a windows 2000 box?

 

[JagdStealth]

Use Linux

Or if your stuck in windows you'll need to be a domain admin (if you were, you'd already be on his machine) and using netRC or some other remote admin software.

some of the more home grown hacking software is Back Orifice (like mentioned before) or sub7 (subseven.slak.org)

the only problem with this software is you'll need your vicitim to run an infected EXE file. If you can talk him into running an EXE file or send him an email or something you'll have much more control over his machine than you'd ever want. Go check out their web site..

and keep in mind that you can and probably would get fired for running that software from work

 

[Aerosly7]

Hey Keith, I was checking out this PhreakNIC5 thing and it seems pretty damned cool. I didn't know anything about it... of course I haven't been to 26oo's site in months. Hell, it's free, I would kinda like to go if nothing else conflicts. Have you been before?

You should drive down; it sounds like it's going to be a lot of fun. There are some people still wanting to share rooms. I got lucky and found a roommate who seems pretty tame.

You should check out the mailing list for the con. You can subscribe to it by sending a message to [email protected] and putting this in the body: subscribe cons-se2600 [your e-mail]
I've been on the list for a couple of months and it's really picked up lately (as it should since the con is this weekend).

I'm more into Phreaking than hacking; in fact, that's part of what landed me the job I have now. There are several presentations on phreaking Friday but I'm probably not going down till Friday night because I don't get off work till 6:00. If you decide to go drop me an email and we'll meet up down there.

 

[sorny]

Yeah what I used to do... I mean, what people used to do was rename the EXE to something like lezkiss.jpg.exe -- on most Windows proggies, it'll show up simply as lezkiss.jpg. The icon may be wierd, but most people don't pay attention.

 

[fastrnyou]

yeah but i put a patch on outlook 2k to prevent him from opening .exe files.. dang nimda and other viruses

 

[sorny]

You should drive down; it sounds like it's going to be a lot of fun. There are some people still wanting to share rooms. I got lucky and found a roommate who seems pretty tame.
...
I'm more into Phreaking than hacking; in fact, that's part of what landed me the job I have now. There are several presentations on phreaking Friday but I'm probably not going down till Friday night because I don't get off work till 6:00. If you decide to go drop me an email and we'll meet up down there.

The more I read about it the more interested in it I am. I would probably just go for one day (saturday) because funds don't allow anything else. The gas on the way to Nashville (2.5 hours) will *almost* kill me I think it'd just be cool and for some reason my boss wants me to go. I guess since it's technology oriented I signed up for the mailing list. Now to just find a working AC adapter for my old IBM 380ED so I can throw Linux on it. Then I gotta get all geeked out by putting some compilers on it and getting my Palm IIIc ready too