Well all changes when I get in highsch ool... (don't mind my gay spaces, theres a reason ...



Well my first year in highsch ool I got involved in drugs, and kind of forgot how to even use a computer..... by the end of the year I realized what I was doing and have been trying to quit.



Now I'm in my second year of highsch ool and I remember that computers exist, and my sch ool has a network.... They allow us a drive called W which we can put our files on there... and then these files get uploaded to the sch ool distr ict server.

So I put a php info file in there and look it over....

next day I bring my usb drive and put my scripts on there...

I moved the files off my directory and onto a new directory on the web server, but still having to use my student number to execute <? include($x);?> x=../../../meow.txt




got into the database and dumped all the user accounts, encrypted passwords... which a good amount work (And the ones I'm interested in)


.... now I should of calmed down and just gone for my purpose of gaining access/priviligies ?? duno how to spell



now being stupid I wanted to see what the Teacher-Admins account could do, so I logged in and downloaded all the default files for the server login...

after modifying them at home, I replaced them... giving all the kids 20,000,000 printing credits, and full priviligies, disabling there proxy server.....


this kind of alerted the teacher-admin, and he removed the files and changed his password.... Since this was done locally there was no trace. It was funny to here him talking about it during IT class. Then he told more stories about h ackers in our sch ool in the past, locally and remote.


being stupid I never used another students (or even teachers..) account to include the script.... or never using a proxy (Well whats the point when the scripts on your name anyway...no point in masking the IP ?...haha..someone hacked me ........)



so I was logged in to there admin acount on the website, and theres this button "Disable Website" I'm like hmmmm... push it, log out.... websites disabled.... log back in and press re-enable... log out... I SWEAR the website was working.


Go to sch ool the next day and websites disabled.... teachers talking all weird about it and about contacting the district server..

Go home, and try to re-enable, but it was already done.... I'm like oooh shit they better not have looked at the logs...

Go to sch ool the next day and brought straight to the office to talk the the principal, cop, admin-teacher, and the admin himself.....


They said the way they caught me was by searching for 7 hours through the computer I sit on every day in class. And 3 hours of searching through the server logs.

They said they noticed I was connecting to a computer to bypass there proxy...

They said the IP I was connecting to matched the attacking IP on the server.

They also said they overheard me and my friends talking about it. (which I do not believe)


Now thats the part I DO NOT get... I never needed to get around there proxy at sch ool, unless I wanted to look at porn or something. I actaully never did anything from the sch ool, except login to teachers acounts which they shouldn't be able to trace....


I thought I would of been caught from them seeing me install the webshell through my account name, and then watching it transfer to a different location... (and even if I did transfer it to a different name they still would of seen it originally on mine right?)





hahaha.. well there you go. I felt like telling someone my story for someone to laugh at.... hopefully someone'll get a good laugh. I've laughed pretty hard myself; but I am more angry than anything. This angers me very much.


I knew I would of been caught if they were to look at the web server logs, and if I did not use a proxy...



would of been wicked to root the thing and delete those logs.... or not to be stoned and push that button alerting the admins....


So they're threatning to fail me in IT class (I think thats agasint the law?? In canada...) and $500 for the damage I did... and possible expellsion


Damage? I installed a trojan? I broke into there database? Thats not damage, they should be paying me for showing them there vulnerabilities!

But the best part is they know I stole the passwords and can't do shit:P:P


just wondering other peoples opinions on the whole thing, mostly consequences...



Do you think I could negotiate with them into fixing the problem and not paying $500,
instead do $500 worth of IT work or some shit? am i going to be expelled?!






EDIT:
oh yeah: I'm not a h acker.... I kind just exploited there system .... and rainbow tables....

was fun though

At a minimum, you'll probably going to loose your computer privileges.

At my school, a public school, yes you would be expelled.

A guy a few years ago created a worm that changed the screensaver on each computer all throughout the district to violent pornography, and he got expelled. (Of course, he's considered a martyr by most students =D).

This year, someone found a way to corrupt various programs on the hard drive, making common classroom utilities like MS Word and IE impossible to use. If he's found, he will be at the least suspended and denied computer privileges for the rest of high school, and possibly expelled. (He will be considered an asshole, since it made doing work on the school computers impossible throughout the year).

I don't think it matters whether you think you're a "hacker" or not, you fucked up their computers, so you're going to have to pay for it. You can't really justify what you did.

Oh, and I wouldn't worry about the police logging your computer traffic, if that's what the spaces are about, because they'll still pick it up.

First of all, what's with all the "h ackers" and stuff? If you're paranoid, just use HTTPS.

Secondly, you've gotten off pretty easy. I've heard of people getting charged with computer crimes for hacking their schools. And what on earth would they be paying you for? The admin is probably going to have to do a fair bit of work to fix it all up.

At the very least, you'll get your computer privileges removed.

h acker' cause I can.


and police logging my computer? fuck that. I don't care.


Angrers me though 'cause I was looking forward to the computer courses next year...

and theres not realy any other sch ool around here for me either than an alternative school... yuck.

What'd you expect?
You hack into the schools systems, Changed Access.
Installed a Trojan, Got all the Usernames and Passwords dumped that you wanted.
disabled the school website,

You made several mistakes
a) Never use your own account
b) When you disabled the website you didn't mask your IP you should of used a Sock4/5
c)What was the point in disabling the school website
d)You didn't copy the database of the website
e)I don't like you


You should of,
Once you dumped the usernames and passwords
Logged onto another account.
Changed the access on your account and 10 others ( So they don't guess it was you )
Left the website alone or just add another page and put your stuff on it.

and stop with the h acker

a) well I had to start somewhere... I could fo switched to another after stealing passwords.... but shhh
b) I did not mean to disable the website? I was stoned and testing what this button does...somehow I left it in disable mode...
c) drugs do crazy things
d)why copy
e)meow

a) Indeed you should have
b)Wonder what this button does "DISABLE WEBSITE"
c) See b)
d)Why not ( All websites I get into I keep database's, Trophys )
e)o.O

Btw, You still got a copy of the Username and password dump?

yeahh i have there database.

Why the fuck do you kids even bother trying to mess with the schools stuff?

You are there to learn not destroy all of their shit. In my opinion you should be expelled for being a dumbass.