BREAKDOWN OF    HOW TO CRACK   PASSWORD PROTECTED   WEB PAGES
Level 7
essay by jeff
Hi all!

Well; I have waited over a week to begin this one hoping someone else would take the interest to write it up: (?)  So I guess I'll do it after all... here is de code....and de trick.....


Well; what you are gona see when you open up this source code is this:

<!-- This page contains no source -->
 
 
 
 

If you look no further....than you will get no further.....
BuT; take a look at your SCROLL bars.....hummmmm; why are they so long...what could be way down there at the bottom?

You will find this way down there at the bottom by scrolling downward: WAY WAaaaaaaay downward..........

 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
   <TITLE></TITLE>
   <META NAME="GENERATOR" CONTENT="Mozilla/3.01Gold (Win16; I) [Netscape]">
</HEAD>
<BODY>

<P><SCRIPT LANGUAGE="JavaScript">
<!----- Script CopyRight © 1996 - 1997  S.Chris Brown (Spikeman)
// This JavaScript code Originally by S.Chris Brown  (Spikeman) 1996 - 1997
function Spikeman_password(form) {
 
 //NOTE: The below code in red.... THIS is the 'trick' here in level 7...
...you will not see this code in your source window....once again, this time, look at your horizontal scroll bar; you will find this code 'hidden' waaaaaaaaaaaaaaaay over ----------->>>>>>>>>>>>>>>>>>>>>>>>>>> here to the right..........----->>>>>>>>>> 
 

if  (form.ID.value=="alert") {                                           // if , ID, or, username is the word "alert"                                
if (form.pass.value=="Invalid") {                                   //if password is the word "Invalid"  Then                                 
location="8times.htm"                                                    //open window and go to good-guy page at "8times.htm" 
} else {                                                                       //else                                                                                               
alert("Sorry " +form.ID.value+ ", wrong password.")  // pop bad-guy error box "Sorry, (username Id value), wrong
 }                                                                                                                                                                                         
} else {                                                                 //If password is correct, but userID is not correct then          
    alert("Invalid Name")                                                          // pop error box that reads, "Invalid Name"                         
 location="8ball.htm"                                                                          //and goto bad-guy URL at "8ball.htm"                               
  }                                                                                                                                                                                  

 
}
//--> </SCRIPT>
</P>

<CENTER><TABLE BORDER=4 CELLSPACING=2 CELLPADDING=2 >
<TR>
<TD></TD>
</TR>

<TR align="CENTER">
<TD>
<H3 ALIGN=CENTER><B><I>Username</I></B></H3> //creates the text Username
</TD>

<TD><FORM name="login"><INPUT NAME="ID"></TD>
</TR>

<TR align="CENTER">
<TD>
<H3 ALIGN=CENTER><B><I>Password</I></B></H3> //creates the text Password
</TD>

<TD><INPUT NAME="pass" type="password"></TD> //this is the input box itself next to Password text
</TR>

<TR align="CENTER">
<TD>
<H3 ALIGN=CENTER><INPUT TYPE="button" VALUE="OK" onClick="Spikeman_password(this.form)"></H3>
</TD>   //creates the OKAY button and activates with the Form name login function above and values of 'form'

<TD><INPUT TYPE="RESET" VALUE="Clear"></FORM></TD> // this creates and defines the clear button
</TR>
</TABLE></CENTER>
 

<CENTER><P>
<HR></P></CENTER>
 

</BODY>
</HTML>


We could at this point change the code to read:
                   if (form.pass.value!="Invalid") {          //if password is not the word "Invalid"
                                                                            //Then
location="8times.htm"                                          // goto good-guy page
 

That's about it for my knowledge of this level...I do not believe I will be able to explain level 8; although I can get through it to level 9 buy employing the STOP procedure I explained in essay 5; I will not be able to explain or comment the code...not yet anyway...If no one has written an essay on it by the time I figure out how to explain it., then I will then do so....BYE! :)


 

Regards to The Sandman who's efforts to build a  network of various studies for newbies is unsurpassed; and who's friendship and tutelage are also unsurpassed!  and to our new friend and JavaScript Teacher "The Seeker"; who's encouragement and selfless efforts are taking us to new dimensions! Respects also to fravia+ for providing such valuable resources for our studies; Thank You!

Greetz to  tnwo,  Dogbytes; snake; Eternal Bliss; Bjanes; Volatility, Nick, Ice, Princess, and to all others; ya know who ya all are!

Jeff

March 1, 1999