Lockdown browsers are fun! 2

Posted by Keith Gable (ZiggyTheHamster) Sat, 20 Sep 2008 01:16:00 GMT

Lockdown Browser Hacked

(code is past the break)

# Need: Ruby, this browser,
# and SysInternals Process Explorer

# Start Process Explorer, configure for always on
# top and only allow single instance, close it.

require 'win32ole'

BROWSER_PATH = ""
PROCEXP_PATH = ""

puts "Starting the lockdown browser"
shell = WIN32OLE.new('Shell.Application')
shell.ShellExecute(BROWSER_PATH, '', '', 'open', '1')

puts "Giving the lockdown browser time to breathe..."
sleep 10

puts "=> Ctrl-C to stop <="

while true do
    shell = WIN32OLE.new('Shell.Application')
    shell.ShellExecute(PROCEXP_PATH, '', '', 'open', '1')
    sleep 20
end

I’m posting this because that browser frustrates me. I have to boot into Windows to use it. This makes me feel better about having to use it. Cheating or doing anything that might get you or me in trouble is a bad idea.

Plus, if you can figure out this program, you probably feel my pain :)

Comments

Leave a response

  1. Avatar
    frank about 1 month later:

    hey can you help me out. im trying to get around this respondus lockdown and i would love to have access to paint. do you have the exe?

    thanks.

  2. Avatar
    Keith Gable about 1 month later:

    I posted the sourcecode. Save it into a file, say, C:\unlockdown.rb, using notepad. Then set up a shortcut to point at your Ruby installation like so:

    C:\ruby\bin\ruby.exe C:\unlockdown.rb

    Installing the Ruby programming language or knowing how to create shortcuts can be found by using Google.

    You’ll of course need to go to the Sysinternals site and download Process Explorer (ProcExp), and you’ll need to edit the source I posted and put the correct path to the lockdown browser and Process Explorer.

    Additionally, the testing interface does something weird that prevents this attack from working, but I have noticed that “toasts” from Steam still work, and clicking them does bring up a chat window. Now, alt-tabbing doesn’t work though.

    Here’s some ideas to improve this:

    1. Figure out the hWnd of the lockdown browser (can already get the hWnd of the IE window it spawns)
    2. Using the hWnd, unset the window flags every so often so windows can be dragged around. Turn on the minimize/maximize/restore controls.
    3. Reset the policies it changes.
Comments