The Ignition Project: Lockdown browsers are fun!

Lockdown browsers are fun!

Keith Gable — Fri, 19 Sep 2008 20:16:00 -0500

(code is past the break)

# Need: Ruby, this browser,
# and SysInternals Process Explorer

# Start Process Explorer, configure for always on
# top and only allow single instance, close it.

require 'win32ole'

BROWSER_PATH = ""
PROCEXP_PATH = ""

puts "Starting the lockdown browser"
shell = WIN32OLE.new('Shell.Application')
shell.ShellExecute(BROWSER_PATH, '', '', 'open', '1')

puts "Giving the lockdown browser time to breathe..."
sleep 10

puts "=> Ctrl-C to stop <="

while true do
    shell = WIN32OLE.new('Shell.Application')
    shell.ShellExecute(PROCEXP_PATH, '', '', 'open', '1')
    sleep 20
end

I’m posting this because that browser frustrates me. I have to boot into Windows to use it. This makes me feel better about having to use it. Cheating or doing anything that might get you or me in trouble is a bad idea.

Plus, if you can figure out this program, you probably feel my pain :)

"Lockdown browsers are fun!" by Keith Gable

Tue, 04 Nov 2008 13:47:23 -0600

I posted the sourcecode. Save it into a file, say, C:\unlockdown.rb, using notepad. Then set up a shortcut to point at your Ruby installation like so:

C:\ruby\bin\ruby.exe C:\unlockdown.rb

Installing the Ruby programming language or knowing how to create shortcuts can be found by using Google.

You’ll of course need to go to the Sysinternals site and download Process Explorer (ProcExp), and you’ll need to edit the source I posted and put the correct path to the lockdown browser and Process Explorer.

Additionally, the testing interface does something weird that prevents this attack from working, but I have noticed that “toasts” from Steam still work, and clicking them does bring up a chat window. Now, alt-tabbing doesn’t work though.

Here’s some ideas to improve this:

Figure out the hWnd of the lockdown browser (can already get the hWnd of the IE window it spawns)
Using the hWnd, unset the window flags every so often so windows can be dragged around. Turn on the minimize/maximize/restore controls.
Reset the policies it changes.

"Lockdown browsers are fun!" by frank

Sun, 26 Oct 2008 00:23:03 -0500

hey can you help me out. im trying to get around this respondus lockdown and i would love to have access to paint. do you have the exe?

thanks.