Forum Articles
WJunction


  1. #1
    Respected Member brazzO's Avatar

    Website(s):
    scrls.co.uk
    • My Statistics

    Default College Javascript Login Bypass Help ?

    Hey, i was set a challenge by my tutor just as a bit of fun to see if i could bypass a really simple login page using java. He has hidden the code and i have tried a few ways of cracking it but nothing working. Any help would be appreciated. So here is the login: http://asch.org.uk/webdesign/login.html .. any help would be appreciated.

    I have tried deobfuscating the login2.js but only there i can get the users not pass. i tried doing the numbers in ascii but still it dont work

  2. #2
    Moderator Gavo's Avatar

    Website(s):
    DirtyWarez.org Forum.DirtyWarez.com ProxyListChecker.org
    • My Statistics

    Default

    When you get the correct username and password it re-directs here


    asch.org.uk/webdesign/examples/scripting/backpage.html

    The page boring dont bother finding it

  3. #3
    Respected Member brazzO's Avatar

    Website(s):
    scrls.co.uk
    • My Statistics

    Default

    what is the user and pass ?
    it does not let me view the actual page because i have not logged in

    i need to know what it actual displays so i can say to the tutor this is what comes up and not just that link as he will ask what is on it.

  4. #4
    Member t3od0r's Avatar

    Website(s):
    wscripts.net damnlolscript.com lulzjet.com
    • My Statistics

    Default

    is redirecting from examples/scripting/backpage.html to http://www.asch.org.uk/webdesign/

    users
    Andreas:test
    Student:Gu355

  5. #5
    Respected Member brazzO's Avatar

    Website(s):
    scrls.co.uk
    • My Statistics

    Default

    ahh i see, thanks. dont know how you guys got the pass's so if you have time later could you say so. was it something to do with the ascii numbers when you de-obscufy it ?

  6. #6
    Moderator Gavo's Avatar

    Website(s):
    DirtyWarez.org Forum.DirtyWarez.com ProxyListChecker.org
    • My Statistics

    Default

    You have

    PHP Code:
    userDetails['Andreas']=[139,155,142,136];
    userDetails['Student']=[184,139,206,201,206]; 
    so use the js to decode it
    PHP Code:
    var user=[139,155,142,136];
    var 
    passwd =[184,139,206,201,206]; 
    And use an alertbox to show them

    eg.
    PHP Code:
    alert(deObfuscate(passwd)); 

    There is probably an easier way but i don't really use js


  7. #7
    Member t3od0r's Avatar

    Website(s):
    wscripts.net damnlolscript.com lulzjet.com
    • My Statistics


  8. #8
    Respected Member brazzO's Avatar

    Website(s):
    scrls.co.uk
    • My Statistics

    Default

    thanks for this, appreciated. will report it to be closed now

  9. #9
    Member Dean2k's Avatar

    • My Statistics

    Default

    Aw I was just trolling through this:

    eval(function(p,a,c,k,e,d){e=function(c){return(c< a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toStr ing(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('1 g=[p,6,n,y,2,5,n,2,u,o,5,6,p,l,o,G,c,r,E,i,D,r,l,F,6, c,C,B,2,5,j,j];1 4=s q();4[\'A\']=[2,H,i,v];4[\'w\']=[z,2,d,S,d];t X(){1 k=f.e(\'W\').7;1 3=f.e(\'V\');1 h=3.7;1 9=4[k];I(9!=Z&&8(9)==h){13.12.11=8(g)}10{Y("T M L");3.7=\'\';3.K()}}t 8(a){1 b=s q();1 m=J;1 x;N(x=0;x<a.O;x++){b[x]=R.Q(a[x]^m--)}P b.U(\'\')}',62,66,'|var|139|pwTb|userDetails|150|1 34|value|deObfuscate|upw|inpArr|outChars|129|206|g etElementById|document|target|pw|142|140|userName| 130|salt|156|133|154|Array|137|new|function|216|13 6|Student||145|184|Andreas|202|128|138|194|152|153 |155|if|0xFF|focus|information|login|for|length|re turn|fromCharCode|String|201|Incorrect|join|passwd |userId|tryLogin|alert|null|else|href|location|win dow'.split('|'),0,{}))

    Trying to figure it out haha


Results 1 to 9 of 9

Similar Threads

  1. School Vs College Life!
    By ChemicalX in forum Polling Plaza
    Replies: 52
    Last Post: 2nd May 2012, 05:37 PM
  2. PayPal Co-Founder Gives Out $100,000 To Not Go To College
    By Daniel in forum News & Current Events
    Replies: 31
    Last Post: 27th May 2011, 01:33 PM
  3. Need Help for my College Project
    By tmk in forum Development Area
    Replies: 12
    Last Post: 7th Apr 2011, 12:02 AM
  4. College Course
    By Rick in forum General Discussion
    Replies: 9
    Last Post: 8th Mar 2010, 05:15 AM
  5. Our college life
    By MRDJ in forum General Discussion
    Replies: 15
    Last Post: 8th May 2009, 02:18 PM