1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

URGENT: How to bypass online time-limits?

Discussion in 'BlackHat Lounge' started by taktikz, Nov 14, 2008.

  1. taktikz

    taktikz Junior Member

    Joined:
    Apr 19, 2008
    Messages:
    113
    Likes Received:
    6
    I'm taking this quiz online and missed one question by a matter of a minute! It's using an old-style Radio button format and I get a pop-up telling me that my time is up.... Isn't there a way to bypass this?:yield:
     
  2. oldenstylehats

    oldenstylehats Elite Member Premium Member

    Joined:
    Apr 10, 2008
    Messages:
    1,893
    Likes Received:
    1,196
    Paste the page's source into this thread.
     
  3. The Scarlet Pimp

    The Scarlet Pimp Jr. VIP Jr. VIP Premium Member

    Joined:
    Apr 2, 2008
    Messages:
    788
    Likes Received:
    3,120
    Occupation:
    Chair moistener.
    Location:
    Cyberspace
    turn off your j.script function....
     
  4. oldenstylehats

    oldenstylehats Elite Member Premium Member

    Joined:
    Apr 10, 2008
    Messages:
    1,893
    Likes Received:
    1,196
    If the quiz requires JS to run, this might boot you off completely.
     
  5. taktikz

    taktikz Junior Member

    Joined:
    Apr 19, 2008
    Messages:
    113
    Likes Received:
    6
    The page is divided into frames, the main menu on left, test in center, and Timer on right..
    I'll post the center frame and right frame...
    Centre Frame:

    <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">

    <!-- applicationframework/cobalt_main_frameset.jsp -->
    <!-- applicationframework/CommonHeader.jspi -->












    <!-- applicationframework/contextPath.jspi -->







    <html>
    <head>

    <title>Blackboard Learning System</title>
    <link rel="shortcut icon" href="/webct/images/favicon.ico" type="image/x-icon" />
    </head>
    <script language="javascript" type="text/javascript" src="/webct/libraryjs.dowebct?locale=en_US"></script>
    <script language="Javascript" src="jslib/commonSession.js"></script>

    <script language="Javascript" src="jslib/popupSupport.js"></script>
    <script language="javascript">
    function frameset_onunload()
    {
    closeVistaPopups();
    }
    </script>
    <frameset rows="100%,0,0,0,0,0" onLoad="cookieCheck();" onUnload="clearCookie(); frameset_onunload();"
    id="vista_main_frameset"
    frameborder="NO"
    border="0"
    framespacing="0">
    <frame name="APPLICATION_FRAME" noresize="noresize" title="Application container" src="/webct/viewMyWebCT.dowebct" marginwidth="0" marginheight="0" frameborder="NO"/>
    <frame name="CHAT_HIDDEN" src="blank.html" noresize="noresize" title="Hidden background tasks" marginwidth="0" marginheight="0" frameborder="NO" scrolling="NO"/>
    <frame name="WIO_HIDDEN" noresize="noresize" src="/webct/appletgenerator.dowebct" title="Hidden background tasks" marginwidth="0" marginheight="0" frameborder="NO" scrolling="NO"/>
    <frame name="IMAGEFRAME" src="blank.html" noresize="noresize" title="Hidden background tasks" marginwidth="0" marginheight="0" frameborder="NO" scrolling="NO"/>
    <frame name="COURSE_MENU_COMM" src="blank.html" noresize="noresize" marginwidth="0" marginheight="0" frameborder="NO" scrolling="NO"/>
    </frameset>
    <noframes>
    <body bgcolor="#FFFFFF">
    </body>
    </noframes>
    </html>
     
  6. taktikz

    taktikz Junior Member

    Joined:
    Apr 19, 2008
    Messages:
    113
    Likes Received:
    6
    Right Frame:

    <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">

    <!-- applicationframework/cobalt_main_frameset.jsp -->
    <!-- applicationframework/CommonHeader.jspi -->












    <!-- applicationframework/contextPath.jspi -->







    <html>
    <head>

    <title>Blackboard Learning System</title>
    <link rel="shortcut icon" href="/webct/images/favicon.ico" type="image/x-icon" />
    </head>
    <script language="javascript" type="text/javascript" src="/webct/libraryjs.dowebct?locale=en_US"></script>
    <script language="Javascript" src="jslib/commonSession.js"></script>

    <script language="Javascript" src="jslib/popupSupport.js"></script>
    <script language="javascript">
    function frameset_onunload()
    {
    closeVistaPopups();
    }
    </script>
    <frameset rows="100%,0,0,0,0,0" onLoad="cookieCheck();" onUnload="clearCookie(); frameset_onunload();"
    id="vista_main_frameset"
    frameborder="NO"
    border="0"
    framespacing="0">
    <frame name="APPLICATION_FRAME" noresize="noresize" title="Application container" src="/webct/viewMyWebCT.dowebct" marginwidth="0" marginheight="0" frameborder="NO"/>
    <frame name="CHAT_HIDDEN" src="blank.html" noresize="noresize" title="Hidden background tasks" marginwidth="0" marginheight="0" frameborder="NO" scrolling="NO"/>
    <frame name="WIO_HIDDEN" noresize="noresize" src="/webct/appletgenerator.dowebct" title="Hidden background tasks" marginwidth="0" marginheight="0" frameborder="NO" scrolling="NO"/>
    <frame name="IMAGEFRAME" src="blank.html" noresize="noresize" title="Hidden background tasks" marginwidth="0" marginheight="0" frameborder="NO" scrolling="NO"/>
    <frame name="COURSE_MENU_COMM" src="blank.html" noresize="noresize" marginwidth="0" marginheight="0" frameborder="NO" scrolling="NO"/>
    </frameset>
    <noframes>
    <body bgcolor="#FFFFFF">
    </body>
    </noframes>
    </html>






    Wouldn't turning off Javascript ruin the rest of my test and thus not allowing me to submit my answers?
     
  7. oldenstylehats

    oldenstylehats Elite Member Premium Member

    Joined:
    Apr 10, 2008
    Messages:
    1,893
    Likes Received:
    1,196
    Edit your posts and put the pasted code inside of a set of these:
    Code:
    <HTML>CODE HERE</HTML>
    Replace the < and > with [ and ]

    The URL would be handy as well so we can get at the source of those javascript files.
     
  8. taktikz

    taktikz Junior Member

    Joined:
    Apr 19, 2008
    Messages:
    113
    Likes Received:
    6
    URL: Online Test



    HTML:
    
    <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">
    
    <!-- applicationframework/cobalt_main_frameset.jsp -->
    <!-- applicationframework/CommonHeader.jspi -->
    
    
    
    
    
    
    
    
    
    
    
    
    <!-- applicationframework/contextPath.jspi -->
    
    
    
    
    
    
    
    <html>
    <head>
    
    <title>Blackboard Learning System</title>
    <link rel="shortcut icon" href="/webct/images/favicon.ico" type="image/x-icon" />
    </head>
    <script language="javascript" type="text/javascript" src="/webct/libraryjs.dowebct?locale=en_US"></script>
    <script language="Javascript" src="jslib/commonSession.js"></script>
    
    <script language="Javascript" src="jslib/popupSupport.js"></script>
    <script language="javascript">
    function frameset_onunload()
    {
    closeVistaPopups();
    }
    </script>
    <frameset rows="100%,0,0,0,0,0" onLoad="cookieCheck();" onUnload="clearCookie(); frameset_onunload();"
    id="vista_main_frameset"
    frameborder="NO"
    border="0"
    framespacing="0">
    <frame name="APPLICATION_FRAME" noresize="noresize" title="Application container" src="/webct/viewMyWebCT.dowebct" marginwidth="0" marginheight="0" frameborder="NO"/>
    <frame name="CHAT_HIDDEN" src="blank.html" noresize="noresize" title="Hidden background tasks"  marginwidth="0" marginheight="0" frameborder="NO" scrolling="NO"/>
    <frame name="WIO_HIDDEN" noresize="noresize" src="/webct/appletgenerator.dowebct" title="Hidden background tasks"  marginwidth="0" marginheight="0" frameborder="NO" scrolling="NO"/>
    <frame name="IMAGEFRAME" src="blank.html" noresize="noresize" title="Hidden background tasks"  marginwidth="0" marginheight="0" frameborder="NO" scrolling="NO"/>
    <frame name="COURSE_MENU_COMM" src="blank.html" noresize="noresize" marginwidth="0" marginheight="0" frameborder="NO" scrolling="NO"/>
    </frameset>
    <noframes>
    <body bgcolor="#FFFFFF">
    </body>
    </noframes>
    </html>
    
    

    HTML:
    <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">
    
    <!-- applicationframework/cobalt_main_frameset.jsp -->
    <!-- applicationframework/CommonHeader.jspi -->
    
    
    
    
    
    
    
    
    
    
    
    
    <!-- applicationframework/contextPath.jspi -->
    
    
    
    
    
    
    
    <html>
    <head>
    
    <title>Blackboard Learning System</title>
    <link rel="shortcut icon" href="/webct/images/favicon.ico" type="image/x-icon" />
    </head>
    <script language="javascript" type="text/javascript" src="/webct/libraryjs.dowebct?locale=en_US"></script>
    <script language="Javascript" src="jslib/commonSession.js"></script>
    
    <script language="Javascript" src="jslib/popupSupport.js"></script>
    <script language="javascript">
    function frameset_onunload()
    {
    closeVistaPopups();
    }
    </script>
    <frameset rows="100%,0,0,0,0,0" onLoad="cookieCheck();" onUnload="clearCookie(); frameset_onunload();"
    id="vista_main_frameset"
    frameborder="NO"
    border="0"
    framespacing="0">
    <frame name="APPLICATION_FRAME" noresize="noresize" title="Application container" src="/webct/viewMyWebCT.dowebct" marginwidth="0" marginheight="0" frameborder="NO"/>
    <frame name="CHAT_HIDDEN" src="blank.html" noresize="noresize" title="Hidden background tasks" marginwidth="0" marginheight="0" frameborder="NO" scrolling="NO"/>
    <frame name="WIO_HIDDEN" noresize="noresize" src="/webct/appletgenerator.dowebct" title="Hidden background tasks" marginwidth="0" marginheight="0" frameborder="NO" scrolling="NO"/>
    <frame name="IMAGEFRAME" src="blank.html" noresize="noresize" title="Hidden background tasks" marginwidth="0" marginheight="0" frameborder="NO" scrolling="NO"/>
    <frame name="COURSE_MENU_COMM" src="blank.html" noresize="noresize" marginwidth="0" marginheight="0" frameborder="NO" scrolling="NO"/>
    </frameset>
    <noframes>
    <body bgcolor="#FFFFFF">
    </body>
    </noframes>
    </html>
    
    
     
  9. oldenstylehats

    oldenstylehats Elite Member Premium Member

    Joined:
    Apr 10, 2008
    Messages:
    1,893
    Likes Received:
    1,196
    Shit, I didn't notice that this was Blackboard the first time I scanned the code. You may not have any luck. Their institutional copies occasionally have little holes, but I doubt something they host themselves would be anywhere near as simple. You could Google it though. I know there was some XSS proof-of-concept code floating around a year or two ago.

    EDIT:
    Yeah, sorry dude. If this were some one-off, homebrew version of WebCT, I might take a crack at it for kicks.
     
    Last edited: Nov 14, 2008
  10. taktikz

    taktikz Junior Member

    Joined:
    Apr 19, 2008
    Messages:
    113
    Likes Received:
    6
    Thanks for trying... anyway, could this be what you're talking about:

    Click Here