Cheat Engine

HomerSexual

I can run JARs at school because they are ran through java.exe, an allowed process. But the school blocks most processes using the default windows protection. When i try to create a new exe in java, i get CreateProcess error 1260 (System blocked createprocess). Is there anyway to bypass this?

I can bypass the blocks by doing a little ethernet trick, but it doesn't allow me to access network (but internet yes)

shhac · Posted: Sat Nov 14, 2009 6:31 am Post subject:

Depends why CreateProcess is actually being blocked (e.g. whitelist only).
Some ideas you could try:
#Renaming the file to the same as an allowed programme (e.g. paint.exe).
#Putting the file in the start menu and then running it.
#Using the .scr extension.
#Because you said you can use java.exe you might be able to copy the API and then launch your programme through your renamed CreateProcess.
#Memory editing with something like http://www.brothersoft.com/memory-editor---java-download-301745.html

tombana · Posted: Sat Nov 14, 2009 6:46 am Post subject:

kitterz · Posted: Wed Nov 18, 2009 9:34 pm Post subject:

hook CreateProcess and allow everything?

HomerSexual · Posted: Wed Nov 18, 2009 9:38 pm Post subject:

kitterz · Posted: Wed Nov 18, 2009 9:55 pm Post subject:

Hm. Interesting. What I did to bypass the school blocks is to get the password hashes, then use rainbow tables to crack the Admin password.

HomerSexual · Posted: Thu Nov 19, 2009 6:15 am Post subject:

iPromise · Posted: Sun Nov 22, 2009 5:47 pm Post subject:

How did they block it? Try to hookhop it.

M.

iPromise · Posted: Wed Nov 25, 2009 12:21 pm Post subject:

Try a hook hop, they might of hooked the function.

haha01haha01 · Posted: Thu Nov 26, 2009 4:11 pm Post subject:

HomerSexual · Posted: Thu Nov 26, 2009 6:49 pm Post subject:

shhac · Posted: Fri Nov 27, 2009 1:54 pm Post subject:

If you can do the ethernet thing and changes persist over logout/login, then edit the registry HKEY_CLASSES_ROOT and make a copy of exefile and a new file extension that points to it, like .x2 for example, then export these so you don't need to recreate them manually in future, log out, log back in without the Ethernet trick and try running a .x2 file.

Don't know if you can edit the reg with java, might be easier if you can.

If all of this still isn't working you could try having some fun with virtual machines and figuring out exactly what commands are being sent to disable you from being able to launch apps.