I Was Wrong But I promised something so Here it is - GoFuckYourself.com

Fridginator · 10-05-2001, 02:50 PM

My hats off to the person who informed us that you couldnt hide the source page and he was correct. I spent 6 hours last night trying to find a way and I couldnt...HOWEVER I decided to create an Uncrackable webpage and I have done so.....
First we now know that brute force programs can NOT attempt attacks on a members page that is in a frame...It makes the program think that it is redirecting. So My dilema was how to create a page that forced the user to use frames So here it is!!:
First create a frameset with one frame invisible and one frame linking to your members section (Make the frameset so its not in a secure directory) (which is password protected). If the hacker attempts to brute force this url then they are told its redirecting by the program....
Now how to prevent the user from just checking the source code and going to the page that isnt in the frame.....
copy the following java script code to your members section page it can be found here:
http://webdeveloper.earthweb.com/rep...ript20383.html

Bingo!! This wont allow the user to view the page and it will automatically redirect to the frameset page!!!! The site is now immune to brute force attacks!!! Change the membersframeset.htm to whatever your frameset is for your members page

If you see anything wrong with this please post it here also post any thoughts you have!!!

[This message has been edited by Fridginator (edited 10-05-2001).]

[This message has been edited by Fridginator (edited 10-05-2001).]

Amputate Your Head · 10-05-2001, 02:52 PM

Quote:

Originally posted by Fridginator:
My hats off to the person who informed us that you couldnt hide the source page and he was correct.

That would be me...

Someone owes me ten bucks.

m0rph3us · 10-05-2001, 02:53 PM

Umm, you relized people (hackers) can just turn javascript off right?

Fridginator · 10-05-2001, 02:54 PM

Ill send it its in the mail

See anything wrong with this idea?

Fridginator · 10-05-2001, 02:55 PM

The brute force hacking programs dont have a java script on off button LOL

Amputate Your Head · 10-05-2001, 02:57 PM

Hey Fridg... I'm not tryin' to pick on ya or anything, but if you can do up an example (dummy page)... I'd still like to have a crack at it... I'm a firm believer that there is no perfect security... especially when it comes to java... I still think I can break it. Better to find out from me than somebody that really wants to get in, right?

Fridginator · 10-05-2001, 03:02 PM

absoulutly im doing it now LMAO And i wouldnt have posted it here if i didnt want it to be scrupulized and batted around!!!

Itchy · 10-05-2001, 03:38 PM

Hummmm that $10 was bet on you and not the page

RK · 10-05-2001, 04:04 PM

Fridginator, this wont work, don't waste your time.
Password cracking programs ignore java script, they couldn't care less about what is in your web sites html code.

------------------
Pay-As-You-Go Hosting FREE Trial!
Below $.90/GB Dedicated Hosting
EnergyHosting - Energizing your business

10-05-2001, 02:50 PM	#1
Fridginator Registered User Join Date: Sep 2001 Location: raymond, nh, 03077 Posts: 12	I Was Wrong But I promised something so Here it is My hats off to the person who informed us that you couldnt hide the source page and he was correct. I spent 6 hours last night trying to find a way and I couldnt...HOWEVER I decided to create an Uncrackable webpage and I have done so..... First we now know that brute force programs can NOT attempt attacks on a members page that is in a frame...It makes the program think that it is redirecting. So My dilema was how to create a page that forced the user to use frames So here it is!!: First create a frameset with one frame invisible and one frame linking to your members section (Make the frameset so its not in a secure directory) (which is password protected). If the hacker attempts to brute force this url then they are told its redirecting by the program.... Now how to prevent the user from just checking the source code and going to the page that isnt in the frame..... copy the following java script code to your members section page it can be found here: http://webdeveloper.earthweb.com/rep...ript20383.html Bingo!! This wont allow the user to view the page and it will automatically redirect to the frameset page!!!! The site is now immune to brute force attacks!!! Change the membersframeset.htm to whatever your frameset is for your members page If you see anything wrong with this please post it here also post any thoughts you have!!! [This message has been edited by Fridginator (edited 10-05-2001).] [This message has been edited by Fridginator (edited 10-05-2001).]

10-05-2001, 02:53 PM	#3
m0rph3us Confirmed User Join Date: Mar 2001 Location: Principality of Sealand Posts: 2,033	Umm, you relized people (hackers) can just turn javascript off right?

10-05-2001, 02:54 PM	#4
Fridginator Registered User Join Date: Sep 2001 Location: raymond, nh, 03077 Posts: 12	Ill send it its in the mail See anything wrong with this idea?

10-05-2001, 02:55 PM	#5
Fridginator Registered User Join Date: Sep 2001 Location: raymond, nh, 03077 Posts: 12	The brute force hacking programs dont have a java script on off button LOL

10-05-2001, 02:57 PM	#6
Amputate Your Head There can be only one Industry Role: Join Date: Aug 2001 Location: Somewhere else Posts: 39,075	Hey Fridg... I'm not tryin' to pick on ya or anything, but if you can do up an example (dummy page)... I'd still like to have a crack at it... I'm a firm believer that there is no perfect security... especially when it comes to java... I still think I can break it. Better to find out from me than somebody that really wants to get in, right?

10-05-2001, 03:02 PM	#7
Fridginator Registered User Join Date: Sep 2001 Location: raymond, nh, 03077 Posts: 12	absoulutly im doing it now LMAO And i wouldnt have posted it here if i didnt want it to be scrupulized and batted around!!!

10-05-2001, 03:38 PM	#8
Itchy Datetronix.com Industry Role: Join Date: Jan 2001 Location: Chill-A-Wack BC Posts: 6,524	Hummmm that $10 was bet on you and not the page

10-05-2001, 04:04 PM	#9
RK Confirmed User Join Date: Aug 2001 Location: In a Bunker Posts: 868	Fridginator, this wont work, don't waste your time. Password cracking programs ignore java script, they couldn't care less about what is in your web sites html code. ------------------ Pay-As-You-Go Hosting FREE Trial! Below $.90/GB Dedicated Hosting EnergyHosting - Energizing your business