Monday, September 3, 2012

A Common Classroom Network Loophole - Remote Shutdown

Does it sound awesome and scary at the same time to know that you can shutdown any working computer in a computer lab you're in without having to move places?
As I was playing with Command Prompt in my Programming class today. I was surprised when I discovered that they did not disable the remote shutdown function, which basically gave anyone with average knowledge of Command Prompt to shutdown any other computer in the classroom (including the professor's computer), without the other user's consent.
I reported it to the professor and the IT people would probably do something about it. But here's how it works:

1. First, you'll need to open up Command Prompt, there are many ways to do it but the easiest way is to hold down the Shift key and right-click on your desktop, then click on "Open command window here".

2. In the Command Prompt window, type "ipconfig" and press Enter. The window will display a lot of information but the only piece you'll need is your IPv4 address, copy that number down somewhere because you'll need to use it later.

3. In the same window, type "shutdown /i" and hit Enter. It will open up the Remote Shutdown Dialog. Click on Add and type in your IP address (Don't worry, you can abort the shutdown command later). A friend of mine was sitting next to me and I used his computer to remotely shutdown my computer, using my IP address. It was not too hard to figure out the IP addresses of other computers in the room, because their endings usually differ by 1 unit, e.g. 10.92.102.78 (my IP) and 10.92.102.79 (my friend's IP). You can shut down multiple computers at once by adding multiple IP addresses. You can use the settings as I did below or come up with your own, just make sure you give yourself enough time to abort the shutdown (I used 300 seconds). Hit OK to finish.


4. By now a warning should appear on your screen showing your Comment in the previous section. After 300 seconds (or whatever number you put in there), the computer will shutdown or restart depending on your choice. To abort the shutdown, click on the Command Prompt window, type "shutdown /a", and hit Enter. The warning will disappear and the shutdown will be cancelled.


I wrote this only for informational purposes, I do not encourage shutting down other people's computers without their consent. If you are going to do so, please think twice about the consequences. :) 
My friend Wes said: "If we shutdown the professor's computer, we either get moved to a higher-level class or we'll get expelled."

No comments:

Post a Comment