Understand Networking/Hacking?

[Daily]

Well..basically..

At school in my Computer and Networking Technology 2 class, as a side project, we designed a small network where the class is broken into two teams. Each team has to have 4 PC's, 1 being a DHCP server, 1 being a Web server (Each team has to have a website), and two being normal everyday Win2k SP4 PC's.

Now that we have everything set up correctly, everyone can view each others teams web pages and remotely access the dhcp server if they know the password etc basically we are all connected but still divided into teams.

The goal:To take down the other team, mainly their DHCP server and their web page.

The ONLY rule:No physical access to the opposing teams boxes.

The hard part: Keeping myself secure enough where they can't get me, but to where they can still visit my webpage. Thats how you stay in the game.

My idea: DDoS their webpage..thats the easiest part. Then I plan on using some sort of IE6 exploit (since thats what everyone has) to auto execute radmin etc etc owned.

Any other ideas of how I could own the other network?

The layout looks kinda like this

 

[Swan]

Well, to secure your webpage create a user for anonymous browsing, to make sure they can't get Admin privileges too easily. My choice? Create an exploit that will automatically download, crack the admin password, or grant you admin privileges. If you know anything about programming this should be a simple task.

PM me on MSN I'll see if I can get you in touch with my mate who defaces sites for fun lol

 

[sc4pegoat]

Damn. Your school promotes e-violence. I need to transfer.

 

[mcnuggetman]

what kind of switch is it? if its a gigabyte switch i can help you

 

[The End]

ARP poisoning with Cain and Able should do the trick but you might tear down your whole network if you do it wrong

http://hackinthebox.org/modules.php...article&sid=12868&mode=thread&order=0&thold=0

criticalsecurity and HTS are down otherwise i would have yanked one of their articles

OR you could see if SSH is available and brute force them then do what you want from there


EDIT:

Is that bus topology that your teams are using or is it just how your picture looks?

 

[Daily]

It's not a bus, they are all connected to the hub, but I was just drawing it quick in paint to give you an idea of how it looked.

Cain and Abel/ARP Cache Poisoning won't work because we aren't logging into something that uses plain text passwords..we used it on our ACTUAL school network once and had a shit load of teachers passwords for our school email..then we showed the network admins how we did it and they flipped out and said that they can't fix it because there are macs on the network, and macs use plain text passwords.
Moral of that story:Macs suck.

AAAANYWAY. Swan..PM me.

Also..we aren't connected to the internet. It's a closed off network.

 

[The End]

I should have worded it better: ARP spoofing/hijacking

you make a querry to a machine and then route it to a diffrent MAC so you could re-route everybody on the other teams network to somebody else's computer so instead of connecting to the DHCP server they connect to computer X (I have never actually done this but I have studied it)

 

[mcnuggetman]

It's not a bus, they are all connected to the hub, but I was just drawing it quick in paint to give you an idea of how it looked.

Cain and Abel/ARP Cache Poisoning won't work because we aren't logging into something that uses plain text passwords..we used it on our ACTUAL school network once and had a shit load of teachers passwords for our school email..then we showed the network admins how we did it and they flipped out and said that they can't fix it because there are macs on the network, and macs use plain text passwords.
Moral of that story:Macs suck.

AAAANYWAY. Swan..PM me.

Also..we aren't connected to the internet. It's a closed off network.

are you allowed to make an intranet?

 

[Atomic]

If you are friends with anyone on the other team, try keylogging their home computer, then get through to root with that info.

Alternatively, put a forum on your site and get them to sign up, extract DB and crack their hash.

 

[Osmosis]

The person to ask would be Annex.

 

[Swan]

alright I was chatting with my friend and he gave me this site:
http://www.remote-exploit.org/

hope it comes in useful

(21:03:06) Rodrigo:
http://www.remote-exploit.org
(21:03:20) Rodrigo:
download backtrack2 live cd
(21:03:34) Rodrigo:
just run a sniffer, and see what you can capture
(21:03:43) Rodrigo:
if they are windows machine
(21:03:58) Rodrigo:
then try exploiting any shared misconfiguration
(21:04:21) Rodrigo:
search about
(21:04:32) Rodrigo:
"shares misconfiguration"

 

[flashcrazy81]

i'd suggest speaking to Annex or investagating on Google aslo bully the other team until they give in

 

[Daily]

are you allowed to make an intranet?

This IS an intranet..if I'm not mistaken.

 

[haggislite]

are you allowed to make an intranet?

anyone can make an intranet, all you need to do is connect two computers together and there you go. Technically speaking The Internet is just the biggest network going, anything else is an intranet.

 

[Daily]

anyone can make an intranet, all you need to do is connect two computers together and there you go. Technically speaking The Internet is just the biggest network going, anything else is an intranet.

In a sense..I suppose. But really to have an intranet you are supposed to have a website set up, or some sort of way of sharing your files with each other.

 

[Macroman]

If you are friends with anyone on the other team, try keylogging their home computer, then get through to root with that info.

Alternatively, put a forum on your site and get them to sign up, extract DB and crack their hash.

I suggest he keylog them like you said lol, It would be the easiest you could get all the information you need and be in withing a matter of minutes.

Good luck