Welcome to HBH! If you had an account on hellboundhacker.org you will need to reset your password using the Lost Password system before you will be able to login.

Would really appreciate some help


ghost's Avatar
0 0

Hi, I'm a newbie. I'd really appreciate some tips on getting through this Javascript Login. This is totally ethical. I was suppose to get certain files for my class and it's a long story. Anyway here is the source. If anyone could give me any tips on this I'd really appreciate it.

<!– ID: W2 –>

<!– url /authentication/login.cfm?gotourl=/catalog/instres_resource_list.cfm&isbn=0-619-15959-6&login=nofrills&CFID=16643050&CFTOKEN=74879887 –>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html>

&lt;head&gt;
	&lt;title&gt;Course Technology -Login&lt;/title&gt;
	

<link rel="stylesheet" type="text/css" href="/apps/styles/structure.css"> <link rel="stylesheet" type="text/css" href="/apps/styles/formatting.css">

<script language="JavaScript"> <!–

function SymError() { return true; }

window.onerror = SymError;

var SymRealWinOpen = window.open;

function SymWinOpen(url, name, attributes) { return (new Object()); }

window.open = SymWinOpen;

//–> </script>

<script name="Redirect" language="JavaScript1.2"> <!– function exploreTo(form) { var myindex=form.dest.selectedIndex window.location.href= form.dest.options[myindex].value;

}

// –> </script>

	&lt;style&gt;
	p, span, td {font-family: Arial, Helvetica, sans-serif; font-size: 10pt;}
	h1.pagetitle {font-size: 20pt; font-weight: bold; font-family: arial, helvetica, helv, sans-serif; margin-top: 0px; margin-bottom: 0px;padding: 0px;}
	a {font-family: Arial, Helvetica, sans-serif; font-size: 10pt; color: #039; text-decoration: none;}
	a:hover{text-decoration: underline;}
	a.visited {color: #669;}
	&lt;/style&gt;
&lt;/head&gt;
&lt;body marginheight=&quot;0&quot; marginwidth=&quot;0&quot; topmargin=&quot;0&quot; leftmargin=&quot;0&quot; onLoad=&quot;document.loginform.DAFLOGIN.focus();&quot;&gt;
	&lt;br&gt;
	&lt;h1 class=&quot;pagetitle&quot;&gt;Login&lt;/h1&gt;	



				&lt;h3 class=&quot;subsectionhead&quot;&gt;You have requested to complete a protected transaction.&lt;/h3&gt;
				&lt;p class=&quot;after&quot;&gt;Thomson Course Technology preserves the safety and integrity of our instructor files.  Please enter your Course.com account information below.&lt;/p&gt;


		

		&lt;form method=&quot;post&quot; action=&quot;/login/index.cfm?CFID=16643050&CFTOKEN=74879887&quot; name=&quot;loginform&quot;&gt;
		&lt;table border=&quot;0&quot; cellpadding=&quot;5&quot; bgcolor=&quot;#efefef&quot; cellspacing=&quot;0&quot;&gt;
			&lt;tr&gt;&lt;td valign=&quot;top&quot;&gt;&lt;span&gt;Username:&lt;/span&gt;&lt;/td&gt;
				&lt;td&gt;&lt;input type=&quot;text&quot; name=&quot;DAFLOGIN&quot; value=&quot;&quot; size=&quot;35&quot; maxlength=&quot;50&quot; tabindex=&quot;1&quot;&gt;&lt;/td&gt;
			&lt;/tr&gt;
			&lt;tr&gt;&lt;td&gt;&lt;span&gt;Password:&lt;/span&gt;&lt;/td&gt;
				&lt;td&gt;&lt;input type=&quot;password&quot; name=&quot;DAFPASS&quot; value=&quot;&quot; size=&quot;35&quot; maxlength=&quot;64&quot; tabindex=&quot;2&quot;&gt;&lt;/td&gt;
			&lt;/tr&gt;
			&lt;tr&gt;&lt;td colspan=&quot;2&quot; align=&quot;center&quot;&gt;&lt;span style=&quot;text-align:center;&quot;&gt;&lt;input type=&quot;SUBMIT&quot; name=&quot;submit&quot; value=&quot;Continue&quot; tabindex=&quot;3&quot;&gt;&lt;/span&gt;&lt;/td&gt;&lt;/tr&gt;
		&lt;/table&gt;

		&lt;input type=&quot;hidden&quot; name=&quot;action&quot; value=&quot;LoginScript&quot;&gt;
		&lt;/form&gt;

		&lt;a href=&quot;/login/index.cfm?action=pwreminder&CFID=16643050&CFTOKEN=74879887&quot; target=&quot;_blank&quot;&gt;Forgot your password?&lt;/a&gt;&lt;br&gt;&lt;br&gt;
		&lt;h2 class=&quot;sectionhead&quot;&gt;Contact us for a Course.com Account&lt;/h2&gt;
		&lt;p style=&quot;color:#F00;&quot;&gt;A Course.com Account will be setup only upon verification that you are an instructor.&lt;/p&gt;
		&lt;ul&gt;
			&lt;li&gt;&lt;em&gt;Colleges, Universities, Continuing Ed Depts, Vocational Schools:&lt;/em&gt;&lt;br/ &gt;Call Thomson Course Technology at 800-648-7450. &lt;/li&gt;
			&lt;li&gt;&lt;em&gt;Private Career Colleges, State and Government Agencies, Healthcare Organizations, and Correctional Facilities:&lt;/em&gt;&lt;br /&gt;Call Thomson Learning at 800-477-3692&lt;/li&gt;

			&lt;li&gt;K-12 Schools Customers call: 800-824-5179, select option 1&lt;/li&gt;
			&lt;li&gt;&lt;a href=&quot;/login/index.cfm?action=ContactIntl&CFID=16643050&CFTOKEN=74879887&quot; target=&quot;_blank&quot;&gt;International Customers&lt;/a&gt;&lt;/li&gt;
		&lt;/ul&gt;
		&lt;br&gt;
		

&lt;/body&gt;

</html>

<script language="JavaScript"> <!– var SymRealOnLoad; var SymRealOnUnload;

function SymOnUnload() { window.open = SymWinOpen; if(SymRealOnUnload != null) SymRealOnUnload(); }

function SymOnLoad() { if(SymRealOnLoad != null) SymRealOnLoad(); window.open = SymRealWinOpen; SymRealOnUnload = window.onunload; window.onunload = SymOnUnload; }

SymRealOnLoad = window.onload; window.onload = SymOnLoad;

//–> </script>


ghost's Avatar
0 0

Go get a gun (buy one if you don't have 1) get some bullets for that gun, shoot yourself in the head….


bl4ckc4t's Avatar
Banned
0 0

pyrodude0303 wrote: Go get a gun (buy one if you don't have 1) get some bullets for that gun, shoot yourself in the head….

Thats a lil harsh.

But, I kinda agree, that login is pretty secure, You would , in my opinion, have to hack the FTP.

My 2 cents

Bl4ckC4t


Mr_Cheese's Avatar
0 1

not to mention its not even a javascript login <_<


ghost's Avatar
0 0

I appreciate it that you guys looked at the source. At least I know not to waste my time trying to hack it. Thanks anyway.