Possible?

[WhiteNova]

Hey, I want to hack a certain computer and I know the IP address. I don't know anything else on the computer. The computer is NOT on a network that I am connected to. I do have limited access to this computer. Can I remotely hack it from my home computer?

[devsed]

define "limited access".

[JB Gzn]

does it for example has a firewall?

[WhiteNova]

For me, limited access is minimum 45 minutes per day (no Saturday or Sunday).

Not sure about firewall but it has Spybot Search and Destroy.

[devsed]

Is the computer connected to the internet? If so, the answer to your query is yes.

Assuming a win32 OS, you should have little trouble infecting it with a backdoor of sorts. If it has a firewall, then you will need a backdoor which [for example] retrieves it's instructions from a text file on a web site, and then connects to an address(yours) listed in the text file....say...a vnc server session that initiates an outgoing connection to the client(server->you instead of server<-you as is typical). That would allow you to use the PC remotely.

You should be more specific with what you wish to accomplish by "hacking" the PC. Do you want to access the data on it remotely? Do you want to monitor other people's usage of it? Something else? Also.....provide information about the PC to get a better answer. Such as...what OS is it running, what is your level of access(user/root/etc), and most importantly is the computer in question connected to the internet.

Lastly, if you carried out my suggestion, you would:

Almost certainly be breaking the law
..and
Almost certainly get caught by any sysop worth their salt

If you are asking this sort of advice on a message board, chances are you should abandon this plan altogether. Hope that was informative.

[WhiteNova]

Computer is connected to the internet.
Breaking the law is not within my list of concerns.
I am a user, I am not even allowed to make folders in the Programs Files Folder.
It's running Windows XP.

If you can tell me how, tell me how. To be honest I'm not sure what I want to do. I just want to know that I can do it. Being caught isn't of my concerns because it would most likely spread around, and everyone would know I accomplished something they couldn't think of doing correctly. None of the information on these computers can really benefit me in any way.

I suppose my two main goals are:
To prove to myself I can do this
To show the stupid a$$ network admins that they're douches.

[devsed]

1. Sit down at computer
2. Put live CD(linux) in the drive
3. Reboot

Now you have read/write access to the entire drive, and you can place anything you want there.

Alternatively....use a tool like Hiren's boot CD to set a new local admin password, log in as local admin and place your trojan that way.

The golden rule is, if you have physical access to a machine, there is no way in hell you can keep someone out of it unless you are standing over their shoulder.

[minorutono]

Lol, yep, if you have physical access to the computer, then you basically control it.

Like said, if you put in a Linux Live CD into the computer, you can Live Boot off the CD and control the whole computer (not remotely though) ..

If you want the password (if there is a password for the admin account on the computer), I suggest OPH Crack. Its a Linux Live Boot that can brute force crack any password on Windows. Downside to this is it takes a while and is pretty conspicuous.. the Text GUI just screams hacker/hack, but just turn the monitor off so noone can see while it cracks the password.

[devsed]

Also...consider a much simpler but higher-yield attack. If you don't mind spending a few dollars, buy a hardware keylogger. It's about the size of a cigarette lighter, and you plug it into the keyboard receptacle of the computer, then plug the keyboard into the logger. It will record every key pressed regardless of any software on the PC.

So here is a hypothetical application after you install it...

1. Fail to logon several times, locking you out
2. Tell the admin something is "wrong with my computer!"
3. When he/she sits down, they will see you are locked out
4. They login with their admin user/pass to unlock you

Then you remove the keylogger, and read the admin's user/pass off of it. That's a much more productive "hack" as you call it, rather than just compromising a single PC.

one of the many cheap hardware keyloggers you can find...
http://www.shopsmokymountain.com/storefrontprofiles/processfeed.aspx?sfid=81367&i=237867425&mpid=5319&dfid=1

A minor note also, a bit of social engineering is involved in this attack. You need to feign ignorance, and get the admin to come to your computer. Don't tell them in advance you are locked out, or they will unlock your account remotely. The best approach is to appear as though you don't understand what is wrong with the computer(put the caps lock key on to really appear daft), to get them to come and physically log-in at the baited computer.

[JB Gzn]

cool, i'm gonna use that at school, hey it worked once,(only without the logger, i knew the password, but they changed it because they knew, i knew )

[WhiteNova]

How about hacking with Net Tools 5? How would I do that? I'd like to give them hell.

[devsed]

I googled "net tools 5" and found http://mabsoft.com/nettools.htm

I don't use that product, so I really can't give you any advice on it.

It looks like someone has cannibalized open-source code, put it all into one horrendous visual basic application, and put their name on it though. Seems like a hodgepodge of 1990-ish tools, indicated by the inclusion of a "credit card validator".

I only see one truly useful tool, and it's the last listed, which is "nmap". If you want to "scan" for exploitable systems, consider something like Nessus, which you can get at http://mabsoft.com/nettools.htm