Changing files across a network

[Live Wire]

Hey, I have access to an admin account  at school, and I'm looking to change the hosts file in the drivers folder. Our school as a LAN network, and several hundred computers. Is there a fast way of doing this, or am I going to have to change each manually? I would appreciate any advice.

[Kulverstukas]

no, I don't think there is a way to change every hosts file at once. Although you might try and create a so called "network boot". Not sure if it's the right term here, but basically when a computer is started, it loads itself locally, but all configuration is downloaded... I think this isn't possible xD

Simpler way would be  to just write a simple program to check and download the hosts file each time the computer starts. So when you change it on the server, when each computer starts over again, it downloads the file... it's rather simple and I could churn it out if you need (get on IRC so we can talk if you like).

[Live Wire]

The computers are all networked, and I'm pretty sure it could grab updates from the school server (which i also have access to) but this would be harder.What type of program do you have in mind?

[Kulverstukas]

A simple downloader that loads each time the computer starts, connects to the remote host, checks if the hosts file is changed - if it is then replaces the local hosts file with one on the server.
It's very simple, a monkey with some knowledge of coding could do it

[Live Wire]

but once again, how do you get it to all computers? or am i a complete moron? and is there a way to do it in java? my C skills suck lol

[Kulverstukas]

You put it on every computer, dude.
In Java it could be done, but I would rather not use it for such a thing. Better use a compiled language.

[Live Wire]

You put it on every computer, dude.

because the usb drive method is so appealing lol. And i think i have a method of spreading the hosts file. I told my instructor that i was having trouble with a program i was working on, and i have ip address, host name, and port number. lol. this should be fun.

[xor]

Bullshit. Find out which DNS server all of the computers are using, there will generally be one or two and they will all be using the same ones. You can find out by doing an ipconfig /all on the command line and checking the DNS servers listed.

Then, you setup a rogue DNS server, or modify the existing DNS server and you can make anything resolve to anything else you want.


Example:


the computer that I'm on has:
   DNS Servers . . . . . . . . . . . : 10.0.0.254


I also noticed that this is the same address as my DHCP server:
   DHCP Server . . . . . . . . . . . : 10.0.0.254


A quick scan on this device using nmap reveals the following:

  PORT   STATE SERVICE    VERSION
  23/tcp open  telnet?
  53/tcp open  domain     dnsmasq 2.15-OpenDNS-1
  80/tcp open  tcpwrapped
  |_http-methods: No Allow or Public header in OPTIONS response (status code 401)
  | http-auth: HTTP/1.0 401 Unauthorized
  |
  |_Basic realm=NETGEAR DGND3700
  MAC Address: E0:46:9A:7C:D3:99 (Unknown)
  Device type: general purpose
  Running: Linux 2.6.X


So we can pretty safely assume that my DNS/DHCP server is a Netgear router. I could then try the admin details (that you already have) with the off chance that they used the same details for the admin page. I'd also try the default username and password for the device.


Then you can change the DNS settings to an OpenDNS server, or another one you created on the network, and you can serve up intercepted DNS requests and redirect as you please.

[Live Wire]

Thought of a better solution. since the default home page my school uses is controlled by the computer science teacher (who's password i have), i'll just slip a redirect into the html of the site. it gets updated every week, so i'll have to do it the day after the update. Thanks for the help though. I really appreciate it.

[Z3R0]

Thought of a better solution. since the default home page my school uses is controlled by the computer science teacher (who's password i have), i'll just slip a redirect into the html of the site. it gets updated every week, so i'll have to do it the day after the update. Thanks for the help though. I really appreciate it.

Think about that real quick, why make a big scene and cause a lot of ruckus? That's a fast way to go to jail in this day and age. Not only that, but why would you settle for a second-rate defacement, when there's the potential to take over the entire network? How often do you think your IT Admin checks the school's website? How willing are you to bet that he probably uses the same password for everything he uses? What you need to do is edit the school's web login so that everyone's information is put into a file that you can grab all of the info from before the next week's update, then delete the file.

After that, take a quick peak at the domain controller (it is what allows you to sign on to multiple computers without having an actual account on any of them), there's a very high chance that will be outdated as purchasing new servers isn't exactly top priority when the old one's work just fine. You know what I mean? If you pwn a domain controller, you pwn a HUUUGE layer of the network. Just think about it.

[Live Wire]

heres the thing. I really only need a second rate defacement. But your idea sounds fun too. The only problem is that the domain controller is not located in, around the school. it is run by the guys who opperate the DoDDs network, which is on the same systems as stuff like us.army.mil stuff. however, the website is hosted here, and i can get at i very easily. and really, who wouldnt want to deface this ? http://www.wies-hs.eu.dodea.edu/