Novell continued 

Once you get into the Novell server as admin your thinking cool I got admin rights. YES you have but the Admin is going to realise soon that someone is fucking with the server really quick, so I got some idears on how to stay admin once you have got in. First you need to get your hands on a copy of 'syscon' if you want to do it from DOS, or if you want to be really cheesie then do it though NT / 95 / 98. The way to do it though a recent micro$oft OS is really quite straight forward. 

Get onto the server volume SYS this is done by going right clicking on it selecting map new drive. Then go to the server and find the drive SYS mount this as what ever you need.
Then go into the system directory and school down you will find lots of little utils that start with N i.e. NDsmang.exe I think just try all of those but it think the one you are after is Nadmin.exe or some thing easy to guess like that. All these utlis can only be run by admin OR someone of security equivalent. Ok if your thinking yeah so then I don't have a clue how you got the admin account on the sever, but if your thinking hmm I am sure I can use  that. Yes you can give a user the equivalent rights of some on else, the legit use is so that you can give of one group the rights to access other groups section / workarea with out having to make them part of that group. 

ok so now you have an idear about what your going to do but you have a problem the admin is clever ( some are ) and is going to notice a new user in the NDS. so you use a nice feature of Novell and in the NDS right at the part of the tree that has the most users creat a new user along the same naming setting on another ie if you have a branch called staff and in it the user names are like staff1, staff2, staff3, staff4 and so on then make a new user call staff8 or what ever. Then have a look around for a little option which hides the user this is so that the admin can't see it. Now look at permissions and then create security equivalent of EVERY THING. This is if you only give your self security equivalent of admin once / if the admin catches on he then deletes / renames admin and you have the same security rights as a user that don't exist :-(. So give your self security equivalent of everything that way the admin has to get rid of every user before all your rights are gone.
Also a lot of admins use this method to create there own back door so they can't get lock out so some how find them hidden admins and give your new user security rights of them aswell. 

Now that you have done this STOP don't use that account / try and hack the network any more for about a mount. This way if your admin thinks its to much hard work to delete the users he is going to try and be smart. "Oh I haven't added any new users lately I will just load one of them backups to get rid of that hacker" said the dum sysadmin. what he does not know is that as he has been doing backups he has been making it hard to get you out. As when he loads up the backup he just puts your user straight back on there. Now if he wants to get rid of you that way he has to use a back up from ages agow and then rebuild the difference in the NDS.


                        A DoS account against Novell servers
Yes it might be lame but lets so you have a good use for needing the server down. Ok when the SYS volume fills up the server crashes. most people think that they will put print cue`s / user files on this volume fill it up. If the print cue is on it then make a nice 
BIG (read MASSIVE) .BMP and then send it to the printer LOADS of times that can do it. or if your admin is nice 'n' trusting then make a prog that just keeps on writing junk to a file.

IE

---------------------------START crap.bas-------------------------------------------------
star:
for a = 5000 to 10000
open crap.sys for append as #1
print #1, a
next a
goto star
---------------------------------End crap.bas--------------------------------------------

Ok it is a cheap and cheerful BASIC (not as in simple as in Basic Allpurpose Symbolic Instruction Code) program coz I am not a programer yet and erver one has basic(its on the win95 CD) and then a complier is 500k download. This will creat a file called crap.sys then keep on filling each line with numbers from 5000 - 10000 and then just keep looping.
It will take a while for this to use up all the spave on the server and you might have a restriction on the amount of space you can use, if that is the case then use a guest account or some thing. Once complied the EXE must be palced in the directory that you want it to fill up.

Have fun

PS : I got all this info from my school admin and a Novell engineer, also my school admin is well allright so if you try it in my school I will brake you legs :-)

TempesT

TempesT@888.nu