|
-//--**--//--xx--//--**--//--xx--//--**--//--xx--//--**--//--xx--//--**--//- .o (( More fun with CyberXpress Internet Kiosks by plunk3tt )) o. -//--**--//--xx--//--**--//--xx--//--**--//--xx--//--**--//--xx--//--**--//- Steps to get root and extend time limit: 1. get R5 and deposit it (we must still pay the initial amount <DAMN>) 2. find a site that requires basic authentication - i used the official fk site, how ironic! :) - [Wizdumb: You said "ironic". I now have no choice but to kill you :P ] 3. click on the site and it will open a new internet explorer! without cyberXpress modifications! just press cancel and stop. 4. in address bar type c:\ and voila! Ro0t <wo0p>! 5. you are automatically logged in as a administrator! DUMB 6. open regedit.exe goto HKEY_CURRENT_USER\software\CyberXpress\time and in the timelimit entry field you will see somtn like 320 7. wait till your time runs out, that means timelimit = 1. you will notice that the keyboard has been locked... but you will still be in explorer. now find a number somewhere (preferably a high # like 5 or so) and copy it. paste it numerous times in the timelimit field in the regestry! somtn like 555555 this means 55hours 55min 55sec! 8. now goto taskmngr.exe in c:\winnt\system32\ and you will see cyberXpress running end task cyberXpress and wait a minute or two... the system should reboot by itself! :P and when it has started enjoy your 55 hours of free internet. 9. as you will notice anyting can be done like telnet,ftp,free printing :P 10. the cyberXpress will pop up so every 20min... to make sure your still online because your not using their browser. if this happens simply click on the auth site a number of times to get it at the top again. :) there are a few other things i've also discovered. if you are in the cyberXpress browser. press: ctrl+shift+F6 .... cyberXpress debug logon ctrl+shift+F10 .... cyberXpress cashUp restart ctrl+shift+F11 .... cyberXpress cashUp logon ctrl+shift+F12 .... cyberXpress administrator logon i've found some passwords in c:\cyberXpress\text\cashuppw.txt and in HKEY_CURRENT_USER\software\cyberXpress\admin but i phEaR it Is Ele3t0 xor encryption or smtn uncrackable :P the password field in the dialup is saved in so with any tool like snadboy or smtn you could easily get it! <whoop> if you decide to publish this lame exploitation of goverment and corporate shit that try to rob us of our basic neccesities and even letting us pay for it... then i would appreciate it if you could just mention my name (Plunk3tt). ;p cheers! [ Amendment by Wizdumb: I'm not sure about the "//" bug I described last issue, but CyberXpress definately haven't fixed the HTTP basic authentication bug described by plunk3tt in this article. What they have done is blocked www.mdma.za.net/* on their kiosks because it's what plunk3tt used to cause the error. Of course, CyberXpress are forgetting the other few million sites that will cause the same error, but I don't care, the fact that my domain is already banned on ZA's first internet kiosks secretly makes me feel cool. ;-P ]