Javascript Password Hacking

Javascript Password Hacking
written by

	   _______________________________________      __    _    _   __  __  ______
	  /	 |  ____||    | ||       ||  __     /    | |  | | / / /   |  __ 
	 /   ____/| |____ |    | ||__   __|| |  | |  / __  | |  | |/ /  |  | | |  | |
	 |/ /___ |  / / ||/ / | |   |/|   |/ --//  |/|__|/||/|  |/ //   |||| |/ --//
	 ____   |  ____||  |   |   | |   |  _    |  __  || |  |      |||| |  _  
       ______/	 /| |____ |  | |  |   | |   | |    | |  | || |__| |   |  | | |   
      |_________/ |______||__| |__|   |_|   |_|  __||_|  |_||____|_| _| __/ |_|  __|

who sucks at text art

I. Statement of Purpose II. The Simplest Protection III. Another Step Up IIIa.Source from Frames IV. Complexity With Environment Variables V. Unescapes VI. "View-Source" Command VII. External Javascripts IIX. Arrays and Divisors IX. Those Number Code Pad Locks X. Lack of Copyright Notice

--Code is enclosed in tildes (~)

SECTION I. Statement of Purpose Well, I don't see any texts on hacking javascript password protection schemes, so I decided to write one. Javascript hacking isn't really that hard, but everybody's a script kiddie these days, so maybe someone will get some use out of my explanations.

Because the most prolific source of javascript-protected web content seems to be hacker challenges, like CyberArmy's Zebulun (which has been discontinued), the explanations are geared towards those. The actual procedures and ideas work for any javascript-protected page. You can find some interesting hacker challenges at http://www.hackergames.net.

SECTION II. The Simplest Protection **Exclusively for hacker challenges**

Sometimes with the first challenge, the password will be written directly on the

page. Usually if this is done, the password's color is the same as the web page's background. To find the password, all you have to do is hit Ctrl-A, which selects everything on the page. Any word that you couldn't see before will show up now. Input that and you're on to the next level. Another 'hide-in-plain-sight' trick is to put the password in a comment in the HTML source, sometimes in the " < FRAMESET ROWS="0,*" frameborder="no" border="0" framespacing="0" > < FRAME NAME="topframe" SRC="top.html" MARGINWIDTH="0" MARGINHEIGHT="0"

SCROLLING="no" FRAMEBORDER="no"> < FRAME NAME="main" SRC="hack1.html" MARGINWIDTH="0" MARGINHEIGHT="0"

SCROLLING="Auto" FRAMEBORDER="no"> < /FRAMESET> < /HTML>

Tags: Javascript, Hacking, Passwords Last modified 03:41 Wed, 17 Oct 2007 by steve. Accessed 322 times What Links Here Share