5 ms·
I remember in high school, the computers where running windows 95. They used this shell hacking "protection" software called Fortress. It worked by hiding butto
by zbowling 14y ago
I remember in high school, the computers where running windows 95. They used this shell hacking "protection" software called Fortress. It worked by hiding buttons and menus and trying to prevent you from opening up various apps or clicking certain files in common dialog boxes.
My first "hack" was just a boot disk that simply copied fortress.exe to another directory (a little choice.exe with autoexec.bat magic).
The second hack came later. The computers were upgraded to Windows 98 and my autoexec.bat trick stopped working because of a BIOS password. Thankfully the machines came with Word which had nice shinny feature called Visual Basic for Applications. Most of the shell was hacked to hide menues still in Fortres 2.0 but good old VBA was still accessible. Using VB I could call Win32 apis and it was just a few calls to enumerate and kill the startup entries for fortress in the registry.
The best part of this was that it was all sanctioned activities sort of. The IT department was in a central building downtown (30 minutes away from our school) and who was always a pain to work with for the teachers. Their gradebook apps failed under fortress and even their teacher passwords failed to disable all the shell hacks. Shutting off fortress was the only compatible way to get things to run correctly for the teachers.
At first when the local IT department found out, they laughed, but then later got upset when the disk of my magic word document spread. It was making it's way across the district via email lists.
At some point in the school year I got accused of spreading 'a virus' to other students that allowed them to download 'warez' on school computers. Apparently fortress was the only thing preventing kids from using WinPopUp and windows NT messenger to send broadcast messages to all desktops across the network.
I tried to fight it and explain exactly how the thing worked and the silliness of shell hack in the first place. It didn't work. The Principal said I was hacking regardless and suspended me. After getting the suspension (and after they called my parents who knew before I did and were very upset already), I quickly called the computer programming teacher (who knew knew C++ and VB and had previously been an assistant for in my sophomore year). He called the principle and super and explained that I was not hacking and that I was 'improving productivity' and that the IT department's policies were hindering teachers. I got out of the suspension by the super the next day but no apology was given. Just a stern "stop hacking" the next week when I got back.
I was later voted most likely to succeed by my class. Apparently in a class size of 1200+, I was well known for my exploits.
- mtrimpe 14y agoDid Fortress also prevent you from searching for explorer.exe using Internet Explorer and starting it from there?
- zbowling 14y agoYou could but it didn't get you very far. Explorer uses the same shell as everything else so it was hacked as well.
- Peaker 14y agoBypassing my school's BIOS password was easy. Open up "DEBUG" in a DOS prompt, and write a few-line assembly loop that writes increasing register numbers to port 70h (register select), and 0 to port 71h (value) -- to reset CMOS memory with all 0's. Then you can just enter BIOS to set it all up from scratch.
- nshepperd 14y ago"Fortunately", back in the days when I was at school, the BIOS tended to have backdoor passwords that were easily googleable. That stopped working eventually, but then I happened to procure for myself a second-hand school computer which turned out to have the BIOS password still set when I bought it. Short work to then run a tool to read the password directly from CMOS. I've forgotten what it was, but for all I know they're still using the same password. Oh, the lengths I went to to run linux livecds...
- tripzilch 14y agoyou meant "altavistable", right? :)
- blhack 14y agoOr open the case and move a jumper.
- redthrowaway 14y ago