____________________________________
..::Details::..
My friends dad works as the head computer dude at a new school and he is setting up there new website.
There school district is pretty strict (as i have been in the same district for the past 2 years -.-) and the website needs to be as secure as can be.
I stayed the night over at my friends house the other day and was showing him this site when his dad came in.
He asked what i was doing and i was like "Well, sir. I am hacking a site >.<" and so he watched me for a while.
Then after a while, i think i was on like realistic 8 or 9, he asked me if i could try and bypass the Teacher Login on the site to see if it could be done.
I asked him what he would give me if i could get it done, and he said i get $20 if i can get past.
I was like that is gunna be easy, so i made a bet with my friend, if i can do it i get $40 ($20 from him $20 from his dad)
IF I LOSE! (I owe him $20)
I looked at the site and realized it was Novell WebAccess. (Novell Groupwise 8)
I checked and it does have JavaScript and Apache enabled.
Note* this is not intended to be illegal i don't want to change my grades, or blow up the school site or anything of that sort, i already have a 3.7 gpa and dont care about school that much. Actually i kinda like school because i get to sit in the computer lab all the time(Most of it at least) i just want my $40 so i can add that to my stash and get me an Ipod
____________________________________
..::What i have tried::..
SQL Injections.
JavaScript.
Page Source.
Editing cookies.
_____________________________________
..::Solution::..
This is where you guys come into play
If anyone can help me it would be greatly appreciated.
I will also give cred to whoever helps me
(Im also going to go to the school district and tell them what there security issues are and how to fix them, i will mention your name in there somewhere if you want, if you dont want me to mention your name then i will keep my mouth quiet and say that i did it all by myself.)
_____________________________________
..::Links::..
GroupWise - https://gw.weber.k12.ut.us/gw/webacc
School Link - http://www.rjh.weber.k12.ut.us/joomla
My Friends Dads E-Mail - spalmer@weber.k12.ut.us (Just in case you need to make sure im not trying anything illegal.)
