|
_|_|_| _| _| _| _| _| _| _| _|_|_| _| _|_|_| _| _| _| _| _| _| _| _| _| _| _| _| _| _| _| _| _|_| _| _|_|_| _| _| _| _| _|_|_| _|_|_| _| _|_| _| _| _| _| _| _| _| _| _| _| _| _| _| _| _| _|_|_| _| _| _| _| _| _| _| _| _|_|_| _|_|_| _|_|_| _|_|_| _| _| _|_|_| _|_|_| _|_|_| _|_|_| _| _| _| _| _| _| _| _| _|_|_| _|_|_| _|_| _| _|_| _|_|_| _| _| _| _| _| _| _| _| _| _| _|_|_| _|_|_| _|_|_| _|_|_| http://www.pheces.org "Gee, I'd love to, but it's my parakeet's bowling night." öööööööööööööööööööööööööööööööö Title: |||| exploitation through the help feature |||| Date: September 17, 1999 Author: matt öööööööööööööööööööööööööööööööö You've probably been in a library, or at school, or at a whore house or something, and seen a windows box that you had a lot of shit blocked out. Usually libraries and schools run programs so you can't get to the desktop, and it blocks out all the 'shutdown to dos' and 'run' type options so you can't go formattin them. Well, heres how you can. Depending on how locked down the system is, you need to either get to Notepad, or get to some program's help feature, the one that has the search box thing. Most non-Microsoft programs will have a help feature that have a File -> Open option. Either way, what you'll need to do is go into Open, select All files from the drop down box at the bottom, or if it doesn't have a drop-down box, or the box doesn't have All files in it, just put *.* for the filename. Hit enter. It should list all the files in that directory. Navigate the menus to the C:\Windows directory. From there, right click on command.com and hit open. Remember, you need to right click, or the program is going to try and open command.com as a text or help file. If you did this all correctly, you should have a little msdos prompt window. You win! From dos you can format the system, delete files, copy files, initiate ftp and telnet sessions and whatever other millecious thing you happen to feel like doing that day. I suggest trying to get to Notepad first, because a lot of newer programs today use a standardized Windows help feature which doesn't have the Open box. I have tried these methods and for the most part they work. This text should give you some good ideas for other ways you could exploit the system to get a dos prompt if these methods don't work. Peace. matt (matt@pheces.org) (((((((((((((((((((((((((((((((((((((((((((((#yep)))))))))))))))))))))))))))))))))))))))))))))