3 ms·
I built a fake Novell login screen using VB6, it would save the users credentials to disk in plaintext, and then reboot, presenting the correct login screen whi
by protocolture 4mo ago
I built a fake Novell login screen using VB6, it would save the users credentials to disk in plaintext, and then reboot, presenting the correct login screen which would work.
I ended up scraping a whole bunch of credentials, even teacher creds, but they were always permissioned. Math teacher had a single folder where math stuff was dumped but couldn't escape that.
One day we were sitting in one of the computer labs, and written on the board was just:
U: training
P: training
with no effort having been made to erase it.
That turned out to be effectively complete teacher level access. They couldn't decide what to do with a bunch of student teachers so just gave them unnamed creds with access to all subjects. And they left the account active for 12 months after the training program. By then, we had scavved up the credentials of a teacher who had been at the school since its inception, and thus had done every job and had the same sort of teacher god rights. His password was just redrocket or something silly.
I had exams, exam answers, notes on student performance, basically everything possible for 3 years. I am so glad there was no logging or anything sensible or I would have been expelled too.