Books Issued And Returned: Fill & Download for Free

Stole library books sitting in computer labs. This is how I did that.Step 1: Get a user account with full controlI simply used a boot able pen drive having LINUX (KALI) on it. So, no need to look for passwords of admin account. Step 1 complete.Step 2: Get IP address of library serverWe have special computers in our library to check for the books that have been issued on our roll number. So, I started cmd on that computer and used "netstat" command and queried for books issued on my roll number. I got the IP address of library server on our network. I also noted down other things about this computer by using "ipconfig /all" command. I wanted things like subnet mask, default gateway and DNS servers.Step 3: Scan the library serverI used zenmap to scan the library server. I got list of open ports.Step 4: Try to break into library serverI used autopwn feature of metasploit to try to exploit into library server. But, it was patched and up to date. So, I started feeling a bit depressed.Step 5: Lots of cold drink and deep thinkingThis is most important step. This step took about 5 days to complete. I kept thinking about how the library management software is working. I noted these actions.Librarian scans the bar code on book and bar code on my I-card and selects some option and the book is issued on my roll number.To return the book, he would just scan the bar code on the book and it would be returned.Looking at these actions I concluded that computer did not require my roll number to return the book. Now this fact will alone will help to hack the system.Step 6: Sniff the networkI used wireshark to capture all data packets that were going to library server. From my scanning part, I knew that library server was running MySQL and a HTTP server. So, the library management system must be somehow using these services. But, I had no idea how. I captured a load of TCP packets.Step 7: Trying to understand, what the s**t was in those packetsI had never done packet analysis before. After a few minutes of Google, I found that it was just a few clicks task in wireshark and I was able to see the data in packets.For every book issued a packet with roll number and some unique ID was being sent. To return the same book to library, just a packet with that same unique ID was being sent. I guessed that unique ID is coming from bar code of the book.Step 8: Trying to understand the bar codeI started with Google. Read some articles about how bar code works. Downloaded an android app on phone to decode the bar code. None worked.Later, I realized, that when I used to check the books issued on my roll number from the computers in library, then that list also had a column saying book ID. So, it was simple.Step 9: Get book ID of books I hadI went to library and used the computer to see the books issued on my roll number. I noted down all the book IDs.Step 10: Asking a teacher for help (Indirectly)The book ID in data packet was in hex. The book ID I noted down was text and some numbers. I had no idea of how to convert that. After struggling with it for hours, I asked a teacher to help me convert it. It turned out very simple. Convert text and numbers in ASCII and convert that number in hex, each byte separately.Step 11: Trying to return a book with a fake packetI saved one of the return packets from wireshark. I opened it in hex-editor to edit it and replaced the hex representing the book ID with my book ID. I used LINUX file2wire tool to send that data packet to server.Step 12: Keeping fingers crossedTo my surprise, the book actually got returned and was now not showing up in my list of issued books.I used this to steal 87 books in total. I made a collection of all the books I liked.Being caughtThe librarian realized the large number of books missing during the counting done at end of each year. They called some guy from company which had made that library management system. Turned out, that software kept logs of everything. The guy figured out that all books that were missing were last issued in my roll number.The college officials called my home without notifying me and they got to know that I had two bookshelves full of computer science books.The college administration and guys from that company called me. I was too terrified. I thought that they would throw me out of college or something like that. But, to my surprise, the company official said that they would pay for all those books if I tell them how I did that. I spitted out every detail with all proof I could present. Nothing happened. College gave me a warning and company paid for all the books.At end of next semester, the college library manager called me. College was donating old books. So, the guy told me to take any number of books I wanted from the books that were going to be donated. I took 38 books more.All is well now. I have nice collection of computer science books at my home. :)

I have actually done it. I used to finish 10 books a week if not more. And they weren't thin 150-200 pages ones! Thick fat books 😀. I remember I used to decide to pick books from the school library based on how fat it was. I was crazy about reading and since my parents disapproved, I obviously did it more. I would pick out all my classmates who weren't interested in reading and get books issued on their library card. And since the books were issued on someone else's card, I had to return them within 7 days. Hence the need to finish. Also I would issue all the books I liked that day cause I would be scared that I wouldnt find them again so would get 10 or more every week. I knew the library better than the librarian 🤣🤣 . I miss those days. I obviously did not open textbooks for weeks, in case you are wondering.Even now, when I run 7 offices and am in administration of essential services during COVID Pandemic, I have finished 40 books since last week of March. I guess it is about how much you love books. I spend around 3 hours reading everyday. Also I sleep little and don't have to worry about housework. So it depends on your stage in life and your passion for something.

Recently I was traveling in Denmark and Sweden. When I arrived in Copenhagen, on the first morning I visited one bicycle shop just to ask for direction, but the owner of the shop after giving me direction asked me, ‘Where you come from?’. When I explained him that I am an Indian but now living in UK, he immediately replied in Hindi. He started speaking fluent Hindi and he told me that he learned this by watching Bollywood Movies. He was a big fan of Akshay Kumar, Sunny Deol, etc. Now after Afghan war he is living in Copenhagen since past 14 years.Then the conversation switched to social-political issues and he was fond of India and praised many things about present Indian Gov. He said, ‘Apka PM Modi Afghanistan aaya tha, bahut madad ki hamari’, which translates to, ‘Your prime minister Modi came to Afghanistan and helped us a lot.’ Indian gov. helped Afghanistan with construction of $290-million Salma Dam, which is expected to help Afghanistan capitalise on opportunities that will open up once the Chabahar project (India-Iran project), linking the port in Iran to Central Asia’s road and railway networks completed.He was not happy with Pakistan and mentioned that Afghans love India - and India-Afghanistan can do very well together.At the end of conversation when I asked him the daily rent for a bicycle, he said, ‘100 Danish Kronas per day, but for you it’s free.’ I told him that I don’t want for free but he completely refused to take money. He said that I can take this and return on the last day. I wanted to give him my id card/passport as a custody but he took nothing. He said, ‘Aap pe vishwaas hai, jab man aaye tab wapas kar dena’, which translates to, ‘I trust on you and whenever you want to return, do it..’.This is a bicycle pic that he gave me for free for 5 days and this helped me to enjoy Copenhagen like a local. It shows the love of Afghans for Indians and also shows that human beings are bonded by love and peace.I am a Hindu by birth and he was a Muslim by birth, but the link of peace and unity brought us together. I couldn’t stop myself from sharing this incident on Quora and I will be indebted to this man Khalid and beautiful country Afghanistan for my entire life.The above story is from the chapter ‘wealth and sharing’ from the book ‘21 Doors to Happiness: Life through Travel Experiences and Meditation’.Edit 1: Thanks everyone for this overwhelming response, I had not expected this. I am really surprised the way this story has touched so many hearts. On the question of Khalid’s pic - I wanted to take his picture, but the last day when I went to return his bike, he was not in shop, his brother Rahmat was there. But kind of love everyone has showed for him, it makes me to travel again to Copenhagen and take his pic and record video. I will try my best to do this.