There was a time quite a few years ago, were I hacked my counties school system when I was in HS. I barely made it out on time.
The story begins:
Early 2018:
When I was in high school, I had a completely different and non scenical personality. I didn't realy care what I got myself into. Prior to the incident, I've destroyed a few school computers in middle school, but no one cared, and I never got in trouble. I didn't understand then and they knew I was reverted a few years mentally, so they gave the slack and turned a blind eye, but talked to my mother.
In high school I would typically cast NSFW, pirated movies, memes, etc onto the rokus using a VPN which I shared with everyone using my arch laptop and making hotspots using the command line. I gained a bit of underground fame across the school for this, and because everyone knew me for my arch window manager looking like a hacker movie terminal to the newbies.
I can't remember the exact timeline this happened, but it was somewhere between in 2018:
I ended up one day poking through the school filesystem, and I noticed a file. (I can't remember the name exactly, something like DOMAIN.TXT) I already had a windows server in a VM I used with two friends at the time on there old hardware. I knew what it could be, and I was right, it was the "MASTER DC(DOMAIN CONTROLLER) LOGIN!" No one SHOULD EVER EVER EVER be granted this account... The imaging process should of involved deleting it, as this was basically admin of the entire county school system. I tried logging into this account after writing it on a piece of paper then drawing all over it to keep it from being read, as I knew what could happen. I opened up the server manager, and saw all the domain controllers, all the users, everything, everyone. I couldn't believe it, I poked around for a bit not realizing they were recording the screen when anything logged into that user, and I knew I wouldn't of been caught if I made a VM with a randomized mac, and joined the domain with it. Instead I was a idiot, and deleted all the domain controllers, or literal internal school networks, instead of reporting the bug which could of got me money. The WiFi for my school, and many went out, and I knew I was in trouble. Everyone was looking at me, and I turned off the computer. Everyone knew what I did at that moment because I bragged like a idiot.
Schools just use plug and play applications for IT, no further tweaking. I could go into recovery mode on a macos using keybinds and install Linux if I wanted to
MattTheTekie
21 Mar 2023 22:53
In reply to UwuRuby
It wasn't something special, but they left the SMB open which I never let them know which has there office which has its provisions in it. B)
I had to use them on Linux usb, or tether over usb and unplug the ethernet, as it was a network based fw, and proxies and DNS were rejected over it. Do NOT plug you're phone into any school computers now a days, as some schools use programs from other companies that AI scan devices without permission looking for anti LGBTQ content and illegal stuff, to report them. There's a vice documentary on YouTube about it.
JinxCade
21 Mar 2023 12:28
In reply to MattTheTekie
Darn, my school says they do, so far not true
MattTheTekie
21 Mar 2023 12:29
In reply to JinxCade
I can also use VPNs on school hardware, I use opera which I got from here which conveniently has a VPN built-in
Oh and no, I cannot install opera from the normal source, the IT did a gud job on locking sum stuff
I also found out how to log onto other users accounts because of a vulnerability in the system which would literally be the easiest thing to fix
MattTheTekie
21 Mar 2023 12:27
In reply to JinxCade
Some companies pay bounties for finding things like that.
Weeeheeep
21 Mar 2023 14:01
In reply to MattTheTekie
I've been told before that I'm good at dodging school restrictions and that they'd reward me tons to help them find it all but I never went because I wanted to enjoy my cheats lol
JinxCade
21 Mar 2023 12:28
In reply to MattTheTekie
I'm in high school
MattTheTekie
21 Mar 2023 12:28
In reply to JinxCade