College Javascript Login Bypass Help ?

[_brazzO]

Hey, i was set a challenge by my tutor just as a bit of fun to see if i could bypass a really simple login page using java. He has hidden the code and i have tried a few ways of cracking it but nothing working. Any help would be appreciated. So here is the login: http://asch.org.uk/webdesign/login.html .. any help would be appreciated.

I have tried deobfuscating the login2.js but only there i can get the users not pass. i tried doing the numbers in ascii but still it dont work

_brazzO Reviewed by _brazzO on 28th Mar 2012. College Javascript Login Bypass Help ? Hey, i was set a challenge by my tutor just as a bit of fun to see if i could bypass a really simple login page using java. He has hidden the code and i have tried a few ways of cracking it but nothing working. Any help would be appreciated. So here is the login: http://asch.org.uk/webdesign/login.html .. any help would be appreciated. I have tried deobfuscating the login2.js but only there i can get the users not pass. i tried doing the numbers in ascii but still it dont work Rating: 5

[Gavo]

This site is using a hacked database of W junction

[_brazzO]

what is the user and pass ?
it does not let me view the actual page because i have not logged in

i need to know what it actual displays so i can say to the tutor this is what comes up and not just that link as he will ask what is on it.

[t3od0r]

is redirecting from examples/scripting/backpage.html to http://www.asch.org.uk/webdesign/

users
Andreas:test
Student:Gu355

[_brazzO]

ahh i see, thanks. dont know how you guys got the pass's so if you have time later could you say so. was it something to do with the ascii numbers when you de-obscufy it ?

[Gavo]

This site is using a hacked database of W junction

[t3od0r]

http://jsfiddle.net/7ZSdk/2/

[_brazzO]

thanks for this, appreciated. will report it to be closed now

[Dean2k]

Aw I was just trolling through this:

eval(function(p,a,c,k,e,d){e=function(c){return(c< a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toStr ing(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('1 g=[p,6,n,y,2,5,n,2,u,o,5,6,p,l,o,G,c,r,E,i,D,r,l,F,6, c,C,B,2,5,j,j];1 4=s q();4[\'A\']=[2,H,i,v];4[\'w\']=[z,2,d,S,d];t X(){1 k=f.e(\'W\').7;1 3=f.e(\'V\');1 h=3.7;1 9=4[k];I(9!=Z&&8(9)==h){13.12.11=8(g)}10{Y("T M L");3.7=\'\';3.K()}}t 8(a){1 b=s q();1 m=J;1 x;N(x=0;x<a.O;x++){b[x]=R.Q(a[x]^m--)}P b.U(\'\')}',62,66,'|var|139|pwTb|userDetails|150|1 34|value|deObfuscate|upw|inpArr|outChars|129|206|g etElementById|document|target|pw|142|140|userName| 130|salt|156|133|154|Array|137|new|function|216|13 6|Student||145|184|Andreas|202|128|138|194|152|153 |155|if|0xFF|focus|information|login|for|length|re turn|fromCharCode|String|201|Incorrect|join|passwd |userId|tryLogin|alert|null|else|href|location|win dow'.split('|'),0,{}))

Trying to figure it out haha