How to Hack LanSchool

Last Updated: March 21, 2023

LanSchool is "classroom software" used by various schools to ensure that students are appropriately using school computers. Unfortunately, the vast array of features Lanschool has are very open to abuse. Malicious users can steal usernames and passwords using the keystroke logger, harass students via chat, and even control keyboard and mouse input. These features are reminiscent of remote administration tools found in many botnets such as GhostRAT in Ghostnet or Zbot in Kronos.

These methods enable you to either disable Lanschool or retain control of the computer for at least three seconds when a teacher has enabled the "Show student" feature, which some teachers use to display the screens of other Lanschool clients to all Lanschool-equipped computers.

Method 1

Method 1 of 5:

Retaining Control with "Show Student" Enabled

1
Wait until the teacher has enabled "Show Student" press Ctrl-Alt-Delete to bring up the screen that has the buttons to get to the task manager, lock computer, etc.
2
Press the Esc key multiple times while releasing Ctrl-Alt-Delete to ensure you hit it right as the menu is disappearing.

Advertisement
3
Press Ctrl-Alt-Delete once again and you will have control of the computer's mouse for 2-3 seconds.

Method 2

Method 2 of 5:

Disconnecting From the Network

1
Remove the network cable from the back of the computer as an alternative method of gaining control, and for an indefinite time. "Show student" ceases to be broadcast to the disconnected computer.
- The above method also applies to computers connected wirelessly, especially laptops with an external "Turn off WiFi" switch.
2
Use software tools.
- For Lanschool 6 or below, "LanSchooled", a piece of software that spoofs Lanschool broadcasts, allows you to perform teacher functions such as shutdown people's screens, etc.
- On Mac OS X, PwnSchool allows you to stop the Lanschool process and render it useless. It is also effective for stopping Apple Remote Desktop and Screen Sharing. Note Pwnschool is a dead project and newer versions of Lanschool are unaffected by Pwnschool.
- Another piece of software available for Mac users is Lanschool Blocker (scroll down to Download Packages, and download latest Version.zip)

Method 3

Method 3 of 5:

Using Microsoft Process Hacker

1
Download and run Microsoft Process Explorer or Process Hacker
2
Right click "student.exe" and go to "Properties".
3
Remove all permissions from SYSTEM. If a member of staff is currently monitoring you, go to the bottom of the permissions list. Your name should have a tick on the terminate permission. You can permit yourself to terminate student.exe.
4
Click "Apply" to save the changes.

Method 4

Method 4 of 5:

Using Command Prompt

1
Find a way to get onto Windows Command Prompt. Then type in the command "Taskkill/f/im" and student.exe. The file will be terminated.
2
Use the next command line with Taskkill/f/im and "lskhelper.exe". That file will be terminated as well. Do the same with lskhlpr64.exe

Method 5

Method 5 of 5:

Using LinuxLive USB

1
Burn a Linux ISO to a USB flash drive.
- Using a computer at home, follow the instructions on Make a Bootable Ubuntu with USB Drive Using UNetbootin
- You probably do not have to pay too much attention to system requirements. When choosing between 64-bit and 32-bit, try 64-bit. If that fails to work, try 32-bit.
2
Restart the computer you want to bypass LanSchool on.
- If the computer boots into windows, try again, pressing F12 to choose a boot device as the computer is starting up. When a menu appears, select your USB flash drive.
3
Choose options to boot Linux live, avoiding any options to install.
- Do not install Linux on the computer you are using! Make sure you choose an option such as "Try Ubuntu without installing"!
- Some of the other steps can be prevented by your instructor, but this one can not, so long as the computer has a USB port.
- This will leave no traces as long as you do not install the operating system.

Community Q&A

Question

Do I need admin privileges to use anything on the computer?

Community Answer

Most school computers will not allow you to uninstall or use foreign programs on the computer without admin privileges.
Question

Can I use this method without admin access?

Community Answer

It depends on the school's policy for computer use. Some computers do not have administrative tools blocked in Windows, and therefore you can use them.
Question

How do I get back in if the school locked me out of my computer?

Community Answer

Download a VPN net work and bring it on a USB. Then you just insert the USB on the computer and it will carry you right through on ANY computer to a personal private account which you can save to the USB and use on any computer too.

Warnings

Most school technology policies prohibit this behavior. You may be suspended or expelled.

⧼thumbs_response⧽
Helpful 1 Not Helpful 0

Teachers know if you unplugged your network cable because on the teacher console, your computer is shown as "Not Responding" and on routers with dynamic DHCP, your IP address changes.

⧼thumbs_response⧽
Helpful 0 Not Helpful 0
Some of these methods are deprecated and do not work on newer versions of LanSchool

⧼thumbs_response⧽
Helpful 0 Not Helpful 0
Method 4 also causes your computer to display as "Not Responding".

⧼thumbs_response⧽
Helpful 0 Not Helpful 0
Most teachers will do fool patrols of the lab, rendering this moot.

⧼thumbs_response⧽
Helpful 0 Not Helpful 0
When a teacher uses the "Show Student" function to demonstrate something, you will not be able to see the demonstration unless you watch someone else's screen

⧼thumbs_response⧽
Helpful 0 Not Helpful 0