MNSPlusTrasher is a specialized hacktool designed to exploit and demonstrate security flaws in the MNS+ school management system used in Rhineland-Palatinate, Germany.
The first MNS+ specific "hacktool"
This tool is primarily used by penetration testers and red teamers to identify and exploit vulnerabilities within the MNS+ environment, commonly deployed in schools. It enables security professionals to automate attacks, spoof messages, bypass restrictions, and manipulate system shares to assess the security posture of MNS+ installations.
This tool is intended for use within the specific MNS+ environment and assumes access to school network resources in Rhineland-Palatinate, Germany. Users should exercise caution as some features (e.g., TeacherConsolePatcher, Blackout) may disrupt normal operations. The tool requires appropriate permissions and may not function outside the targeted MNS+ infrastructure.
Clone the repository from https://github.com/basti564/MNSPlusTrasher
Download binaries and changelogs from the releases page (note: versions v1.0-v1.8 are no longer available)
Run the tool on a Windows machine within the MNS+ environment (no explicit install commands provided)
AWBSpoofer
Spoofs messages addressed to the AWB within MNS+
TeacherConsolePatcher
Patches RoomMgr.dll to allow TeacherConsole.exe to execute without permissions
Blackout
Stops screen transmission to the teacher by creating a blackout effect
Bypass CMD
Bypasses blocked CMD using a custom PATH extension
Sharefinder
Finds hidden MNSPlusFile and MNSPlusDC network shares
Map/Unmap shares
Maps or unmaps standard MNS+ network shares
Grab IP from PC name
Retrieves IP address of an arbitrary PC by its room and PC ID
LSD Mode
Activates a translucent color-changing overlay on the screen