EG Information

Main Index
EG Manual
Disclaimer
Legal Information
Hall of Fame
Hall of Shame
Member Rankings
Members List
Meet the Staff

Training Missions

Read Me First
Basic Skills
Realistic Scenarios
Cryptography
Software Cracking
Linux ELF Binary Cracking
Logical Thinking
Programming
Captcha Cracking
Patching
Steganography
Deface This Wall
/dev/null
/dev/urandom
/dev/extra

Knowledge Bank

Discussion Forums
Exploit Database New
PasteBin New
RSS Feeds RSS
Articles / Tutorials
Videos
Online EG MP3 Player Radio
Downloads
Tools

Code Resources

Submit Code
Ajax
ASM
Bash
C
CPP
Csharp
Delphi
Haskell
Java
Javascript
Jython
Lisp
mIRC
MySQL
Perl
PHP
Python
QBASIC
VisualBasic

Pimp Us Out!

Review enigmagroup.org on alexa.com

Has Enigma Group Helped You? Then Help Us By Advertising For Us. Place One Of The Following Images On Your Site And Create A Link Back To Enigma Group.

Enigma Group

Enigma Group

Enigma Group

Enigma Group

 

Affiliates



The Urinal

hackhound.org

suck-o.com

hack.org.za

flyninja.net

 

Enigma Group's Articles



Return to Category Selection

Basic School Restriction Bypass - Submitted By: operator 2008-08-19 11:11:43
**** This is a small article, a much larger one will be done later *****
 
For all those who have been slapped down by restrictions at school, look no further.
 
Before I start, this is a warning. This article involves editting the Registry Editor.
 
([WARNING:]) Editting the Registry Editor without proper knowlegde is extremely  
dangerous. Doing so may result in your computer booting improperly and not working. If possible, make backups,
and be careful at all times.
 
I recently got tired of school restrictions, so I made a little program in C.  
Now its not the best, as i dont expect it to be; considering its my first C program.
 
Im going to talk about somethings it does and show you some code you can compile yourself.
 
If you are unfamiliar with the registry, please visit http://en.wikipedia.org/wiki/Windows_registry
 
In computing, the Windows registry is a database  
which stores settings and options for the operating system for Microsoft Windows  
32-bit versions. It contains information and settings for all the hardware,  
software, users, and preferences of the PC. Whenever a user makes changes to  
"Control Panel" settings, or file associations, system policies, or installed  
software, the changes are reflected and stored in the registry.[/quote]
 
First, im going to show and explain how to gain access to the control panel of your computer. Im not
sure about your school, but gaining access to Administrator only gave me control of the computer I was at, so  
dont get too hot of a head.
 
Here is a section of code that worked.
 
#include <windows.h>
#include <stdio.h>
#include <stdlib.h>
 
int main(int argc, char *argv[])
{
# Or take the lazy way out and use REGEDIT.EXE.  
#If blocked, start from COMMAND.COM
 
     printf("\n Enable CP\n");
     printf("\n Dont do too much damage. Have fun.\n\t");
     system("PAUSE");
     system("reg add \\\"HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\\" /v NoDispCPL /t REG_DWORD /d 0 /f");
     system("reg add \\\"HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\\" /v NoControlPanel /t REG_DWORD /d 0 /f");
     system("taskkill /im explorer.exe /f");
     system("start explorer.exe");
    return 0;
}
 
 
Lets take notice to the two most important lines, lines 9 & 10.  
 
system("reg add \\\"HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\\" /v NoDispCPL /t REG_DWORD /d 0 /f");
 
As you will notice, this is executed through the CMD. If your school has bad security practices, then doing so WITHOUT the help
of compiling it into an exe might be the better way out. However, those of us with schools with brains, keep reading.
 
Although most school will block the CMD, they will not block commands sent to them. This goes for batch programming too. Hey, take the easy  
way out with Batch files. Who cares.
 
Back to focus. "reg add" is the basic query, and you guessed it, it adds the following to the Registry Editor. If the line already exists in the  
RegEdit, it will override it.  
 
\\\"HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\\"
 
Notice the \\ before the actual english. Its escaping characters. I want a \ in the code, so i need to put another \ to allow it. So
to allow \ in it, i actually put \\. The \" is escaping the ".  
 
HKCU is just short for HKEY_CURRENT_USER. The rest is simply the destination.
 
The syntax is like this:  
REG QUERY KeyName [/v ValueName | /ve] [/s]
 
As shown, the "/v NoDispCPL" is the valuename we want to edit. The "/t REG_DWORD" is the reg type data. This ranges from strings to binary.
The "/d 0" is the value we are setting. 0 meaning the restriction is NOT in place. Similarly, 1 means restricted. The "/f" at the end simply  
means it is not going to ask "Are you sure?". We dont need confirmation, we know what we are doing.
 
The part after of  
     
system("taskkill /im explorer.exe /f");
system("start explorer.exe");
 
 
I use this for the changes to take effect. No need to log out when you can do this now can yah?
 
If you were to compile the code above (language C) in something such as Dev-C++, you would have a nifty little feature.
 
Cant let the man keep us down.
Also, don't be lame. This is for example. Code yourself :)

Return to Category Selection
Comment By: PaperMario3 2009-02-19 13:36:33
Good article. It's just too bad that regedit.exe is disabled on all the computers at my school.

Comment By: lup0 2011-12-15 11:46:08
great article! :) i didnt much know about the reg command.. it was a good primer.. also reminded me the good old taskkill /im the cousin of linux kill.

If you wish to submit a comment, you must be a registered member and logged in.

Login or Register.



Return to Category Selection

 

Who Visited EnigmaGroup Today?

1584 Guests, 269 Users (183 Spiders)
hkevin, hackaday, whoami, limited, Rex_Mundi, Caddyamilla, NIGHTWOLF, dark_void, Cockelala, Xendz, strudels, trueorfalse, Klosse, ddxc, whisperer, GothicLogic, Blavatsky, InjectioN, Hessesian, Bumpadjuppy, DrOptix, blackknight911, Effomeidonize, Distorted, JohnMalkovitzch, TheHarrisonW, Obop, ellisp, Vreality2007, advenlydent, zach, suetekh, Vengeance987, m0rt, 2345, electro-technic, riesenjoe, IvanDimitriev, nmobin27, RomeoG, timetrust, 2142, 3ntr0py, BillTuer, advilapyday, lotato, lonely.connection, CloverCipher, vnd, aurena, rospark, valy1177, learning, st3alth, Partisan, K0gller, fitz, Jayjay, psychomarine, Vspectrum, San Marino, TinCardinal, brunoriversyhn, code-g, yshiau, Psiber_Syn, Seasharp, obencefoozy, SlayingDragons, Link-, tinuigimeni, jasonbourne, Fred, somebody777, Meonkzt, CJ_Omaha, jearrorne, cls777, unsugsNashy, Balksnuntails, Sir D. Naut, batsbargy, Rik, Macabre, Nightraven, Iccyx, Repuhlsive, vipervince2002, Janomatrix, lol, veceattainc, techno, Exclaw, Nikhil, evjfvir967nj, Mod777, nermtode, Tjm, bjy1997, hecky, saraf, elprof, damoniceht, trik, jordan86, SnoopSky, dan_movie, OnetInsolefon, darkfire1515, seojlhmyrhwh, Thoplehap, MaxMeier, 1028rajeev, Abhinav2107, autotuneuser, alexelixir, Tauya, Jozinbrejl, kernel_mod, quolc, anandoump, vladavlada, Taicadine, AnnaNoult, GreenTiger, baripadatimes, Ewing, Blackbeard, thepuppeteer, BON-SELE, hak4r, Unotohumsmush, m4f10, avacraft, becool, thecoder, n01se, alpha1, saki, ObesseJew, ActictGlync, sajan, unicornrainbow, Domihoolbob, matt.14, max66, SnowFury, Spud101, myfabregas, Ausome1, kajman121, Frudopvia, ideveloper6, OLOLO, Bugshuppy, lamb, VagWirura, LialiTiTviors, Ordeptpen, scifics, Pozycj-Z21, Gkjt, interPuscruse, aaftab, TheCheeseDemon, blackcyxx21, jollyjimbo, N4g4c3N, rineDriekly, Rap70r, Xargos, flarornEral, ovetz13, sonu sahu, Breezy, emitleBen, Hackpad, JWTSR, nicyun, kaizo, itevainee, luke460, AverageJoe, zeratu92, litbk, Mr.Pickle, mannavard1611, LoopyLion, NexusVos, mtroscheck, burberrybagsjr, nikedunksxm, xordux, jeho, Lonewolf034, Dragonite, nhorton, Reloaded, Odile, Kaptain_k1rk, Teefelltugh, grizzly, posthuman01, jakesboy2, pwnpwnlolz, Sabo, Lakhoamnmek, Røgue, dot_Cipher, mori, snickerless1, cart1m, KELATALFTUS, hubris, Afrika, welepocourl, carpinteyrofbt, ReottphoffBom, Reahastegah, pumashoesld, pdanielt, dmac006, DnA-Ender, Red Fox, couptupleakb, ryanjcrook, iMaxx, sh3llcod3, TimHortons, EmilaHapsaums, Feld Grau, burgeoningneophyte, Maroonhat, CookieAu, tinkansinar, Mitodina, timberlandoutletlufc, zsefvy, guccioutletox, AlexDiru, AbercrombieFitchhl, Ryuske, r0z4, slchill, kalak55, Ph4Kt480ii, beefarn, Jigoku, WrossyJes, pollolololo, ZepSung, Fragility, jell0, C9019, Othrguy, Noticon, KIKNWING, llasarus, mdubz, leah027, iellswo, MAZI_, Estilaamoli, subtentar, Trollorful, no, nas0151, Traybo, howisthechicken
 
Enigma Group