level5

BREAKDOWN OF HOW TO CRACK PASSWORD PROTECTED WEB PAGES Level 5 essay by jeff

Level 5 pops a password username box 'before' you can get to the actual page to view the source.

Now; I do not know if there is a different way to by-pass this obstical, but this is how I did it...

We can quickly discover just how much faster Netscape is versus Macro$oft by running the Congratulations page at:

http://www.proweb.co.uk/~greenway/Java/co4th.htm

First run a test thru Netscape and then run it thru M$ using the following example to pass to next level...

click on the four darlin's to pass to level 5
before it can pass to the actual page for viewing it Pops a Username password box
Clicking on 'view source' does us no good; it simply will not open up for viewing...

Well; bookmark the page, or copy the URL, so you can readily return to it:

Now lets go ahead and run thru what happens when we click the Username box...
Oh; it immediately pops another box...this one wants a 'password'
lets click 'okay' on that one...
We get an error box; "Incorrect username or password! Access denied"; clicking 'okay; takes us to a bad-guy page...
If you click on Back; or "I will try level 5 again" the Username password box will pop again...

Okay this is how I by-pass this type of protection...

Without filling in anything in the input box area...(you can if you want)
I now press my keyboard 'enter' key ...this activates and moves past the Username box and pops the Password box...
pressing my keyboard 'enter key' once again moves me thru this input box and pops the
"Incorrect username or password! Access denied", error box....

I now place my curser arrow on the STOP button up in the toolbar area...
Upon pressing the keyboard 'enter key', this time, when I click my enter key, I will IMMEDIATELY press the stop button...

If you do this fast enough you will be able to stop the code from taking you to the bad-guy page...you will see if you have done this stop proceedure fast enough that you have locked into the good page .....

You made it! Boy, that one was a lulu! Now on to Level Six...

.If you were not fast enough to stop it then you may just see this good-guy page for a, flashing , second before it moves on to the bad-guy page...You will have even LESS time to try to STOP this the second time you try to re-run it and STOP it because now the proceedure has been loaded into your cashe...

It is here that I open up M$ Explorer...and it is here where I prove just how much faster Netscape is versus M$...
Run the same proceedure as above and when you get to the part where you click on the STOP button you will find that you have at least a 2-3 second plus opportunity to stop the page before the transfer is made to the bad-guy location...

Thats it!
Once you have stopped it at the lulu You made it! page; Now you can open and view the source to discover what the correct input was for the User and password values.....

Here is the source below:

This one is even commented for us already in some areas!!

<!---------- JavaScript begins...

var username = "joe" ;
var username1 = "jack" ;
var username2 = "john" ;
var username3 = "jake" ;
var username4 = "jes" ;
// The desired usernames

var message1 = "Enter username";
//The message to show when the user is prompted for the password

var un = prompt (message1,""); //; var message1 = "Enter username";

var password = "1" ;
var password1 = "2" ;
var password2 = "3" ;
var password3 = "4" ;
var password4 = "5" ;
// The desired passwords

var message = "Enter password";
//The message to show when the user is prompted for the password

var incmess = "Incorrect username or password! Access denied!";
//The message to show if the username or password is incorrect

var minimizemsg = "The window will now minimize to prevent you peeking!"
// this is the function which keeps us from seeing 'view source '

var pw = prompt (message,""); //;var message = "Enter password";

if (un == username) { //; IF username is 'joe' then okay

if (pw != password) { // ;...but if password is not equal to " 1 " assigned to the username joe...

                alert (incmess);                     // ; THEN...get value of incrmess   "Incorrect username or password! Access denied!";
//                window.content (
                window.open("errrrr6.htm","_self") } // ; open window; goto bad-guy page
}
if (un == username1) {                             //; If username is jack..............see (joe above) ect
        if (pw != password1) {
                alert (incmess);
//                window.content (
                window.open("errrrr6.htm","_self") }

}
if (un == username2) {
        if (pw != password2) {
                alert (incmess);
//                window.content (
                window.open("errrrr6.htm","_self") }
}
if (un == username3) {
        if (pw != password3) {
                alert (incmess);
//                window.content (
                window.open("errrrr6.htm","_self") }
}
if (un == username4) {
        if (pw != password4) {
                alert (incmess);
//                window.content (
                window.open("errrrr6.htm","_self") }
}
if (un != username) {                         // ; IF username is not equal to 'joe'..... is not okay
if (un != username1) {                      //; IF username is not equal to 'jack'..... is not okay
if (un != username2) {                      //; IF.........(see jack above) ...... ect ect ect
if (un != username3) {
if (un != username4) {
       alert (incmess);                          // ; THEN...get value of incrmess   "Incorrect username or password! Access denied!";
//       window.content (
                window.open("errrrr5.htm","_self")      //; open window; goto bad-guy page (notice a different URL this time)

}
}
}
}
}
//JavaScript ends ---------->

</SCRIPT>
</HEAD>
<BODY>
You made it! Boy, that one was a lulu! //Congrats You Cracker U!

<P>Now on to Level Six.
<CENTER></CENTER>

<CENTER><A HREF="6theaven.htm"><IMG SRC="girls2.gif" BORDER=0 HEIGHT=120 WIDTH=75></A></CENTER> //Goto good-guy page at 6theaven.htm

That about wraps it up for this one......
How come I'm the only one doing these essays??
I may get thru level 6 and Seven....but somebody had better get busy on level eight....cause one of my tricks will get me thru it.....but explaining the code......? forget it..............

Regards to The Sandman who's efforts to build a network of various studies for newbies is unsurpassed; and whos
friendship and tutelage are also unsurpassed!
and to our new friend and JavaTeacher "The Seeker"; whos encouragement and selfless efforts are taking us to new
dimensions!
Respects also to fravia+ for providing such valuable resources for our studies; Thank You!

Greetz to tnwo; Dogbytes; snake; Eternal Bliss; Bjanes; Volatility, Nick, Ice, Princess, and to all others; ya know who ya all
are!

Jeff
2/23/99