Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Windows :: library.txt

Using the Help feature to run arbitrary programs, get a DOS prompt, etc in protected Windows systems




     _|_|_|  _|        _|     _| _|     _|  _|     _|    _|_|_|   _|      _|_|_|
     _|      _|      _|  _|  _| _| _|  _| _| _|  _|  _|  _|   _|  _|      _|
     _|_|    _|      _|_|_|  _|    _|  _|    _|  _|_|_|  _|_|_|   _|      _|_|
     _|      _|      _|  _|  _|    _|  _|    _|  _|  _|  _|   _|  _|      _|
     _|      _|_|_|  _|  _|  _|    _|  _|    _|  _|  _|  _|_|_|   _|_|_|  _|_|_|


                  _|_|_|   _|  _|  _|_|_|  _|_|_|  _|_|_|  _|_|_|
                  _|   _|  _|  _|  _|      _|      _|      _|
                  _|_|_|   _|_|_|  _|_|    _|      _|_|    _|_|_|
                  _|       _|  _|  _|      _|      _|          _|
                  _|       _|  _|  _|_|_|  _|_|_|  _|_|_|  _|_|_|


			     http://www.pheces.org
                "Gee, I'd love to, but it's my parakeet's bowling night." 


öööööööööööööööööööööööööööööööö

Title:      |||| exploitation through the help feature ||||

Date:       September 17, 1999
Author:     matt

öööööööööööööööööööööööööööööööö

You've probably been in a library, or at school, or at a whore house or something, and seen a
windows box that you had a lot of shit blocked out.  Usually libraries and schools run programs
so you can't get to the desktop, and it blocks out all the 'shutdown to dos' and 'run' type 
options so you can't go formattin them.  Well, heres how you can.  Depending on how locked down
the system is, you need to either get to Notepad, or get to some program's help feature, the one
that has the search box thing.  Most non-Microsoft programs will have a help feature that have a 
File -> Open option.  Either way, what you'll need to do is go into Open, select All files from 
the drop down box at the bottom, or if it doesn't have a drop-down box, or the box doesn't have 
All files in it, just put *.* for the filename.  Hit enter.  It should list all the files in that
directory.  Navigate the menus to the C:\Windows directory.  From there, right click on 
command.com and hit open.  Remember, you need to right click, or the program is going to try and
open command.com as a text or help file.  If you did this all correctly, you should have a
little msdos prompt window.  You win!  From dos you can format the system, delete files, copy 
files, initiate ftp and telnet sessions and whatever other millecious thing you happen to feel 
like doing that day.  I suggest trying to get to Notepad first, because a lot of newer programs 
today use a standardized Windows help feature which doesn't have the Open box.  I have tried 
these methods and for the most part they work.  This text should give you some good ideas for 
other ways you could exploit the system to get a dos prompt if these methods don't work.  Peace.

matt (matt@pheces.org)

(((((((((((((((((((((((((((((((((((((((((((((#yep)))))))))))))))))))))))))))))))))))))))))))))



TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH