zOMG haxxored into skools system!

[Jersey]

The other day I figured out how to get into the Administrator's account for the grading/attendance program my school uses. Took a few guesses at it and I was in... and by the looks of it they never changed the default login and password for the admin account. So I can pretty much change anything in the system to what I want, but I have to be on a teacher's login on windows to have the program show up on the desktop :-/. Would be pretty nice to be able to access the program remotely somehow, but I doubt that can be achieved.

Its almost amazing how easy they make it these days to get into stuff you're not supposed to be in.

[Raptor]

what is the name of the program?

at our school, they use a java based app called "star base"

they also have "deep freeze" installed on every computer.

[PHISH-PHREAK]

They use pinnacle at my school. But deep freeze is easy to get around, ill try to find the program to "thaw" computers.

Edit: Here you go http://www.angelfire.com/planet/pla954/deepunfreezer.rar

[Raptor]

I've seen that one, it's a great "hack"

I didn't want to do too much though, because they have windows logs of every app you open and run and I bet they have keyloggers too...

not that they are going to be reading those, but I think they might notice when my workstation has a changed desktop background...

[PHISH-PHREAK]

Just do discreet things like changing all the bookmarks to PLA and stuff like that.

[Tachyon]

http://www.thinkgeek.com/gadgets/security/5a05/

Leave this in a teacher's computer for a day or so til it can be retrieved securely and the passwords are yours. Use the login and password to access the grading system, and make sure that the hard copies are lost in a mysterious accident. If that's not your style, change the admin passwords around and raise holy hell in the system til they scrap the whole thing.

[amazing_ned]

There was a discussion in BinRev about how bad an idea playing with grading systems was (someone brought up something about grade audits and other checks that were done), but this seems pretty interesting. If you really wanted remote access (probably a bad idea because A) most schools turn their computers off at night and 2) you'll probably get caught, which would be bad) and did have physical access (it seems from the posts that you do) you could always install a remote control program (some schools use VNC so the tech guy doesn't have to go onsite for everything). That would be a pretty bad idea, though, and I don't recommend it at all.

[Jersey]

what is the name of the program?

at our school, they use a java based app called "star base"

they also have "deep freeze" installed on every computer.

We use something called Class XP.

http://www.thinkgeek.com/gadgets/security/5a05/

Leave this in a teacher's computer for a day or so til it can be retrieved securely and the passwords are yours. Use the login and password to access the grading system, and make sure that the hard copies are lost in a mysterious accident. If that's not your style, change the admin passwords around and raise holy hell in the system til they scrap the whole thing.

Yeah I saw that thing and thought that it would be pretty nice for getting teacher's login's and stuff so I could just do stuff through the admin account, but logged into their Windows so it doesn't come from my student Windows ID. Cost more then I'm willing to dish out though, and it would be a complete bitch if they found it, because then I'd be out of that money pretty easy.

There was a discussion in BinRev about how bad an idea playing with grading systems was (someone brought up something about grade audits and other checks that were done), but this seems pretty interesting. If you really wanted remote access (probably a bad idea because A) most schools turn their computers off at night and 2) you'll probably get caught, which would be bad) and did have physical access (it seems from the posts that you do) you could always install a remote control program (some schools use VNC so the tech guy doesn't have to go onsite for everything). That would be a pretty bad idea, though, and I don't recommend it at all.

I was looking through the "Students" drive and looks like kids have already put shortcuts to the program in there, but I haven't tried to run it from my student windows login yet though (I'll test it tomorrow just to see if the program opens). And I'm pretty sure we have an on site tech guy (is actually one of my friend's dad) that most likely fixes shit for the schools throughout the district.

My grades are decent enough that it wouldn't be worth the chance of getting caught changing them, and my latenesses/absences aren't that much either. If anything, latenesses/absences would be the only thing I'd change back a couple numbers. Its still cool to be able to see your grades and everybody elses before they report cards come out and crap. And if I time it right, I could probably catch the Progress reports and change those to P (passing) if I knew I was gonna be getting one otherwise.

I logged onto it the other day during Auto to check my grades a day ahead of the the report card, and a couple other trustworthy kids were standing behind me in the office... Got the "Whoa! You hacked into that?" kind of response. So under theirs and AntiHacker's standards, I must be an 31337 haxxor for guessing the default Username and Password for the program.

[Dr P4nyk]

Thats a good way to end up in trouble.

P4nyk

[Colonel Panic]

Yeah, in case you didn't notice, most teachers still keep regular old-fashioned pencil-and-paper grade books.

So if your grade is changed in the system and it gets noticed (entirely possible, and not unlikely except in very big schools) they're not going to have any trouble figuring out what the original grade was, or who the most likely culprit is.

If a bunch of students' grades change, the chance of detection is probably going to be an order of magnitude greater.

In the end, it's really not worth it to tamper with grades. Academic fraud is a serious matter. You really stand to lose a lot, and the chances of getting caught can be high. If you do get caught, you'll likely be expelled, and an expulsion for something like that is probably going to follow you around for awhile, especially if you're at the college level.

Besides, you're cheating yourself out of an education as well. You'd really be much better off just paying attention in school and doing your homework.

And eat your vegetables, say no to drugs and always go to church every Sunday!!

[Jersey]

Blah blah blah

And eat your vegetables, say no to drugs and always go to church every Sunday!!

Yeah I know. I really would never mess around with mine or anybody else's grade because its really not worth it at all, especially when my grades are decent enough. And screwing up big time now would only make things tougher on me in the future, and I don't need that.

And...
Only if they're tasty, I'm not into the drug scene at all (seen enough of what it does to people), and church can lick my balls (don't really buy the whole "higher power" shenanigans).

[M-26-7]

church can lick my balls

I know a few not yet de-frocked Priests who would be happy to help out.

[Jersey]

church can lick my balls

I know a few not yet de-frocked Priests who would be happy to help out.

Oh, so you know them personally? 


I figured there'd be some kind of Priest related comment from that, twas only a matter of time.

[Tachyon]

Well yeah if I was to change grades digitally I'd make sure that the paper records had accidents as well.

[ryanfido]

what is the name of the program?

at our school, they use a java based app called "star base"

they also have "deep freeze" installed on every computer.

We use something called Class XP.

http://www.thinkgeek.com/gadgets/security/5a05/

Leave this in a teacher's computer for a day or so til it can be retrieved securely and the passwords are yours. Use the login and password to access the grading system, and make sure that the hard copies are lost in a mysterious accident. If that's not your style, change the admin passwords around and raise holy hell in the system til they scrap the whole thing.

Yeah I saw that thing and thought that it would be pretty nice for getting teacher's login's and stuff so I could just do stuff through the admin account, but logged into their Windows so it doesn't come from my student Windows ID. Cost more then I'm willing to dish out though, and it would be a complete bitch if they found it, because then I'd be out of that money pretty easy.

There was a discussion in BinRev about how bad an idea playing with grading systems was (someone brought up something about grade audits and other checks that were done), but this seems pretty interesting. If you really wanted remote access (probably a bad idea because A) most schools turn their computers off at night and 2) you'll probably get caught, which would be bad) and did have physical access (it seems from the posts that you do) you could always install a remote control program (some schools use VNC so the tech guy doesn't have to go onsite for everything). That would be a pretty bad idea, though, and I don't recommend it at all.

I was looking through the "Students" drive and looks like kids have already put shortcuts to the program in there, but I haven't tried to run it from my student windows login yet though (I'll test it tomorrow just to see if the program opens). And I'm pretty sure we have an on site tech guy (is actually one of my friend's dad) that most likely fixes shit for the schools throughout the district.

My grades are decent enough that it wouldn't be worth the chance of getting caught changing them, and my latenesses/absences aren't that much either. If anything, latenesses/absences would be the only thing I'd change back a couple numbers. Its still cool to be able to see your grades and everybody elses before they report cards come out and crap. And if I time it right, I could probably catch the Progress reports and change those to P (passing) if I knew I was gonna be getting one otherwise.

I logged onto it the other day during Auto to check my grades a day ahead of the the report card, and a couple other trustworthy kids were standing behind me in the office... Got the "Whoa! You hacked into that?" kind of response. So under theirs and AntiHacker's standards, I must be an 31337 haxxor for guessing the default Username and Password for the program.

yeah, or you found out where it was written down right?

pencil!