[BACK]
Hacking Novell NetWare: Some boring information.

The most common problem is that there's a lot of "how to hack" and "superhacker softwares" around which don't work at all.
Why? Well... The main reason is that the first Novell versions were buggy. With some software you didn't even have to know the password to login. Such bugs are reported to Novell and always fixed in the next version.

Todays most efficient ways to hack Novell is to snoop and/or search for security bugs created by supervisor. What do I mean with that? Well... The thing is that often companies & schools give the adminstrator/supervisor job to someone who is not trained at all. Almost every single NetWare server have SYS:, VOL1:, \APPS and a lot of other defaults - they have originally been configured exactly like the beginners guide pages for setting up NetWare servers.
Not that it specificly is bad, but those who had to use those pages to install the server WILL sooner or later make a lot of mistakes. Often they have logins with gigs of space just "hanging around" without even a password... or with access to much more than it should....
And some Admins even turn off parts of the NetWare security options.

Don't be surprised if you even find admin or supervisor logins hanging around...
I have! Without password! When you got your admin account, why not make a new one?
Now your getting the picture? Hard to hack a system? Well, depends on the Admin.
Check the admins trustees. A lot of mistakes/backdoors can be found that way.
And, if every login got the same security/trustees as everyone else except one, that login is probably a backdoor or a mistake. Play around and you ought to find some weaknesses.

A few lamers disables floppydrives, and then feel secured that "no one can bring in hacking utilities". How lame... You could either bring in a laptop, or (even better), enable diskdrives by hacking the Bios.
Then there are these stupid "how to hack" using the console.
If you got free access to the console you could as well call yourself admin, since you can do whatever you would like to do with the system. I don't think any sane admin give any unauthorized person free access to the console so I won't waste any space with telling anyone what to do with the console.




Elventh Alliance's homepage