LanSchool - Revision history

Tony: /* Communications with LanSchool */

2008-08-20T01:05:08Z

Communications with LanSchool

← Older revision		Revision as of 01:05, 20 August 2008
Line 106:		Line 106:
	</td></tr></table>		</td></tr></table>

		+
		+	===August 19th, 2008===
		+	[[Tony]], after finishing his exams, finally writes a followup post to the above. http://compsci.ca/blog/legal-status-update/
	<br><br><br>		<br><br><br>

Bobrobyn: /* The Packet */ witch -> which (spelling correction)

2008-08-11T17:10:01Z

The Packet: witch -> which (spelling correction)

← Older revision		Revision as of 17:10, 11 August 2008
Line 109:		Line 109:

	==The Packet==		==The Packet==
-	'''Note:''' Lanschool's packet was changed in v7.0 in May 2007 and added Data Stream Encryption ~~witch~~ fixed the potential security flaw.	+	'''Note:''' Lanschool's packet was changed in v7.0 in May 2007 and added Data Stream Encryption which fixed the potential security flaw.

Dan: /* August 7th, 2008 */

2008-08-08T03:40:42Z

August 7th, 2008

← Older revision		Revision as of 03:40, 8 August 2008
Line 65:		Line 65:
	Dana Doggett of LanSchool replys:		Dana Doggett of LanSchool replys:
	<table border="1"><tr><td>		<table border="1"><tr><td>
-	~~Daniel~~,	+	Dan,


Line 92:		Line 92:
	CompSci.ca makes the changes.		CompSci.ca makes the changes.

		+
		+	Hacker Dan's reply:
		+
		+	<table border="1"><tr><td>
		+	The changes (with your modification to #2) have been made to the pages in question. Also tony will be updating his blog post, stating that the issue has been resolved and was likely due to a miscommunication, in the next few days.
		+
		+	If i had know of your attempts to contact me, i would have likely suggested and made the changes at that time.
		+
		+	I am glad this matter could be resolved reasonably with an agreement by both sides and i hope any dealings between us in the future will be positive.
		+
		+	Sincerely,
		+	Dan
		+	</td></tr></table>

	<br><br><br>		<br><br><br>
		+
	==The Packet==		==The Packet==
	'''Note:''' Lanschool's packet was changed in v7.0 in May 2007 and added Data Stream Encryption witch fixed the potential security flaw.		'''Note:''' Lanschool's packet was changed in v7.0 in May 2007 and added Data Stream Encryption witch fixed the potential security flaw.

Aziz: Spelling/grammar edits up to but not including "The Story" section

2008-08-08T02:35:01Z

Spelling/grammar edits up to but not including "The Story" section

← Older revision		Revision as of 02:35, 8 August 2008
Line 1:		Line 1:
-	'''NOTE:''' This page details a proof of concept exploit of the LanSchool program '''~~witch~~ no longer works''' (since versions 7.0 and up). CompSci.ca and [[Hacker Dan]] do not support, condone or recommend the use of it in real life (So don't send us e-mails asking how to get it working or how to hack your schools network). Also since this exploit was found and ~~lanschooled~~ was created, '''LanSchool has fixed the potential security hole described on this page'''. CompSci.ca and [[Hacker Dan]] will not help you exploit new versions of the software so do not e-mail us asking how. All information is provided as is and is the sole option of Hacker Dan and we are by no means responsible for how you use it or the effects it may have on you, your computer or anything that happens to you as a result of reading this page or using the software on and linked to from it.	+	'''NOTE:''' This page details a proof of concept exploit of the LanSchool program '''which no longer works''' (since versions 7.0 and up). CompSci.ca and [[Hacker Dan]] do not support, condone or recommend the use of it in real life (So don't send us e-mails asking how to get it working or how to hack your schools network). Also since this exploit was found and LanSchooled was created, '''LanSchool has fixed the potential security hole described on this page'''. CompSci.ca and [[Hacker Dan]] will not help you exploit new versions of the software so do not e-mail us asking how. All information is provided as is and is the sole option of Hacker Dan and we are by no means responsible for how you use it or the effects it may have on you, your computer or anything that happens to you as a result of reading this page or using the software on and linked to from it.

-	'''Disclaimer:''' The content of this page is only the ~~option~~ of Hacker Dan and ~~thous~~ who edit ~~it's~~ content. Nothing on this page should be taken as fact with out checking the validity of the claim.	+	'''Disclaimer:''' The content of this page is only the opinion of Hacker Dan and those who edit its content. Nothing on this page should be taken as fact with out checking the validity of the claim.

	==What is LanSchool==		==What is LanSchool==
	[[Image:Taskbar.JPG\|thumb\|What it looks like]]		[[Image:Taskbar.JPG\|thumb\|What it looks like]]
-	LanSchool is type monitoring program that is used by many school boards in Ontario to ~~key~~ an eye on their students as well as controlling one or all computers in a given lab. It is seen by some as another example of the school boards spending money on software that they could get for free, with the free version even being of higher quality. Early versions LanSchool had a critical flaw in its design ~~witch~~ caused a security hole mentioned below (~~witch~~ is now fixed in ~~version~~ 7.0 and up).	+	LanSchool is type of monitoring program that is used by many school boards in Ontario to keep an eye on their students as well as controlling one or all computers in a given lab. It is seen by some as another example of the school boards spending money on software that they could get for free, with the free version even being of higher quality. Early versions LanSchool had a critical flaw in its design which caused the security hole mentioned below (which is now fixed in versions 7.0 and up).
	<br><br>		<br><br>
	The LanSchool website: http://www.lanschool.com/		The LanSchool website: http://www.lanschool.com/
Line 12:		Line 12:

	==The Story==		==The Story==
-	'''Note:''' LanSchool has since updated there software and fixed the security issue talked about on this page in the below story. '''The bellow is solely the ~~option~~ of Hacker Dan''' and should not be taken as anything but just that.	+	'''Note:''' LanSchool has since updated there software and fixed the security issue talked about on this page in the below story. '''The bellow is solely the opinion of Hacker Dan''' and should not be taken as anything but just that.

Dan at 02:27, 8 August 2008

2008-08-08T02:27:41Z

← Older revision		Revision as of 02:27, 8 August 2008
Line 1:		Line 1:
	'''NOTE:''' This page details a proof of concept exploit of the LanSchool program '''witch no longer works''' (since versions 7.0 and up). CompSci.ca and [[Hacker Dan]] do not support, condone or recommend the use of it in real life (So don't send us e-mails asking how to get it working or how to hack your schools network). Also since this exploit was found and lanschooled was created, '''LanSchool has fixed the potential security hole described on this page'''. CompSci.ca and [[Hacker Dan]] will not help you exploit new versions of the software so do not e-mail us asking how. All information is provided as is and is the sole option of Hacker Dan and we are by no means responsible for how you use it or the effects it may have on you, your computer or anything that happens to you as a result of reading this page or using the software on and linked to from it.		'''NOTE:''' This page details a proof of concept exploit of the LanSchool program '''witch no longer works''' (since versions 7.0 and up). CompSci.ca and [[Hacker Dan]] do not support, condone or recommend the use of it in real life (So don't send us e-mails asking how to get it working or how to hack your schools network). Also since this exploit was found and lanschooled was created, '''LanSchool has fixed the potential security hole described on this page'''. CompSci.ca and [[Hacker Dan]] will not help you exploit new versions of the software so do not e-mail us asking how. All information is provided as is and is the sole option of Hacker Dan and we are by no means responsible for how you use it or the effects it may have on you, your computer or anything that happens to you as a result of reading this page or using the software on and linked to from it.
		+
		+	'''Disclaimer:''' The content of this page is only the option of Hacker Dan and thous who edit it's content. Nothing on this page should be taken as fact with out checking the validity of the claim.

	==What is LanSchool==		==What is LanSchool==

Dan: /* The Story */

2008-08-08T02:26:01Z

The Story

← Older revision		Revision as of 02:26, 8 August 2008
Line 10:		Line 10:

	==The Story==		==The Story==
-	'''Note:''' LanSchool has since updated there software and fixed the security issue talked about on this page in the below story. The bellow is solely the option of Hacker Dan and should not be taken as anything but just that.	+	'''Note:''' LanSchool has since updated there software and fixed the security issue talked about on this page in the below story. '''The bellow is solely the option of Hacker Dan''' and should not be taken as anything but just that.


Line 27:		Line 27:
	'''Update:''' LanSchool fixed the security issue on May of 2007 and tried to contact Hacker Dan at this time, however due to a mix up with e-mail addresses this news was not received in till August 2008.		'''Update:''' LanSchool fixed the security issue on May of 2007 and tried to contact Hacker Dan at this time, however due to a mix up with e-mail addresses this news was not received in till August 2008.
	<br><br><br>		<br><br><br>
		+
	==Communications with LanSchool==		==Communications with LanSchool==
	===Feb. 26th, 2006===		===Feb. 26th, 2006===

Dan: /* Application of the packet */

2008-08-08T02:25:22Z

Application of the packet

← Older revision		Revision as of 02:25, 8 August 2008
Line 118:		Line 118:

	==Application of the packet==		==Application of the packet==
-	'''Note:''' This application will not work with new versions of LanSchool as the flaw was fixed in version 7.0.	+	'''Note:''' This application will not work with new versions of LanSchool as the '''flaw was fixed in version 7.0.'''

	The following is a very simple Java application that will take advantage of the above information to black screens for the demo version of 6.5 of Lanschool only on the computer that you are using. To send it to all computers in a network you would need to use a destination mask that broadcasts to a subnet.		The following is a very simple Java application that will take advantage of the above information to black screens for the demo version of 6.5 of Lanschool only on the computer that you are using. To send it to all computers in a network you would need to use a destination mask that broadcasts to a subnet.

Dan: /* LanSchooled */

2008-08-08T02:24:42Z

LanSchooled

← Older revision		Revision as of 02:24, 8 August 2008
Line 143:		Line 143:
	==LanSchooled==		==LanSchooled==
	[[Image:Lanschooled.JPG\|thumb\|300px\|LanSchooled Screen Shot]]		[[Image:Lanschooled.JPG\|thumb\|300px\|LanSchooled Screen Shot]]
-	'''Note:''' "LanSchooled" is the name of the proof of conspect program to demonstrait a security flaw in LanSchool witch has since been fixed. "LanSchooled" should not be confused with the software it tried exploited, LanSchool."LanSchooled" in no way is ment to replace or do the same thing as LanSchool and should not be used as such, in fact "Lanschooled" does not work at all now that LanSchool has been updated. CompSci.ca nor Hacker Dan support "LanSchooled", sell it, or give advice on how to use it.	+	'''Note:''' "LanSchooled" is the name of the proof of conspect program to demonstrait a '''security flaw in LanSchool witch has since been fixed'''. "LanSchooled" should not be confused with the software it tried exploited, LanSchool."LanSchooled" in no way is ment to replace or do the same thing as LanSchool and should not be used as such, in fact "Lanschooled" does not work at all now that LanSchool has been updated. CompSci.ca nor Hacker Dan support "LanSchooled", sell it, or give advice on how to use it.

	I used all this knowledge to make a point-and-click Lanschool hacking tool that can help you understand how the attack works. Remember that this is only for educational use and should not be used for evil purposes. I therefore take no responsibility for what you do with it. With that aside, I only tested it on the demo verson but i would like to hear from people who got it to work on other versions.		I used all this knowledge to make a point-and-click Lanschool hacking tool that can help you understand how the attack works. Remember that this is only for educational use and should not be used for evil purposes. I therefore take no responsibility for what you do with it. With that aside, I only tested it on the demo verson but i would like to hear from people who got it to work on other versions.

Dan: /* LanSchooled */

2008-08-08T02:23:47Z

LanSchooled

← Older revision		Revision as of 02:23, 8 August 2008
Line 158:		Line 158:

	===Where to get===		===Where to get===
-	Note: "LanSchooled" does not work since the flaw was fixed in v7.0 and is ONLY here for historical reffernce. It won't work, and it won't do anything.	+	'''Note:''' "LanSchooled" does not work since the '''flaw was fixed in v7.0''' and is ONLY here for historical reffernce. '''It won't work''', and it won't do anything.

	*Latest Versons of files: http://compsci.ca/dan/LanSchooled/		*Latest Versons of files: http://compsci.ca/dan/LanSchooled/

Dan: /* LanSchooled */

2008-08-08T02:23:23Z

LanSchooled

← Older revision		Revision as of 02:23, 8 August 2008
Line 156:		Line 156:
	You must hit send to transmit the packet. The easy set up buttons just configure the packet that you are going to send.		You must hit send to transmit the packet. The easy set up buttons just configure the packet that you are going to send.
	<br><br>		<br><br>
		+
	===Where to get===		===Where to get===
		+	Note: "LanSchooled" does not work since the flaw was fixed in v7.0 and is ONLY here for historical reffernce. It won't work, and it won't do anything.
		+
	*Latest Versons of files: http://compsci.ca/dan/LanSchooled/		*Latest Versons of files: http://compsci.ca/dan/LanSchooled/
	*Sorce Code: http://compsci.ca/dan/LanSchooled/LanSchooled.java		*Sorce Code: http://compsci.ca/dan/LanSchooled/LanSchooled.java