Can you break it?

[Worm]

Here at work we have some areas where the computers are locked down fairly tight. What I need to do is allow the user access to our intranet. The PC runs an app that needs access to the internet, and it doesn't play well with Proxy or ISA server, so I can't restrict internet access via those methods.

So, my thought was to build a restricted browser that won't allow you to type in your own URL, and will not let you open a new browser window (Control-N or Shift-Click). Printing is still operational with Control-P.

For testing if you run the app it will start up with IR's web site by default (www.indigorose.com), or you can pass it a command-line parameter such as

mie.exe http://www.google.com

and it will start at Google.

If anyone has some time to try and break this, please do.

[Stefan_M]

Hello Worm,

looks like it doesn't work on my PC.
Only the standard abort site will be displayed .

Installed Software:
Win 2000 SP4.
IE 6
Norton Internet Security 2004


Stefan

[rhosk]

Pretty neat, however if there's a command line option, how secure is it really?

BTW, I was able to "get a new window" in a round about way ---

[Worm]

I knew I could count on someone here to break it

Stefan,
is your firewall stopping it from connecting to the internet?

Ron,
The desktops themselves are locked down by Fortres so once the desktop icon is set up, Fortres would make it so you couldn't edit it. We put the shortcuts to the programs we allow on the desktop, and only those apps are able to be run.

And, if you wouldn't mind, would you share how you got a new window?

[rhosk]

Oh OK,

I did conclude that you inhibited even the target="_blank" links, nice! But, I just navigated to the IR forum, went to compose a thread and typed my email address in >> preview >> hit link >> opened my email client (you may have this restricted as well). Typed me a web address >> preview again and launched a new window. It also worked on any email address on the websites.

If you didn't think about that, there ya' go. I still like the app!! Small and tight!

[Worm]

so the new window was actually launched from the email client rather than the Test Browser, right?

[rhosk]

Originally Posted by Worm

so the new window was actually launched from the email client rather than the Test Browser, right?

Well, understand that my email client is OE by default. I went ahead and made it my Hotmail address and it actually launched a new IE browser window wanting to go to hotmail. So, to answer your question - it did launch from the Test Browser.

[Worm]

Okay, I get it. OE is actually launching the new browser, but I still need to stop it.

Thanks.

Originally Posted by rhosk

Well, understand that my email client is OE by default. I went ahead and made it my Hotmail address and it actually launched a new IE browser window wanting to go to hotmail. So, to answer your question - it did launch from the Test Browser.

[sside]

Here it works.
By dubleclicking it will open www.indigorose with command line it takes you anywhere, just insert a link.
Shift click doesn't work

[Stefan_M]

Ok my Firewall blocked the communication.
After deactivation it works.

Stefan

[Worm]

This one should stop the mailto: and ftp:

I need to figure out how to stop downloading via http too. It would be fairly easy for someone to download something to the desktop and run it.

[Worm]

Anyone had any luck breaking the new version.

[kpsmith]

Worm,

Can a user create a new shortcut on these computers? Or is that locked down too? Just wondering because you could drag any Web shortcut onto the window to change URL's

[rhosk]

Originally Posted by Worm

Anyone had any luck breaking the new version.

I played with it for a while, good job!! Couldn't fool it this time.

[Worm]

KP,
Fortres locks the PC down pretty tight. The way we have it configured, they can't edit a shortcut, or create one. Basically the only thing they can do is run the icons we have set on their desktop. As I think about, I could have had Fortres deny access to iexplorer.exe and not had to worry about the whole new window thing. I guess I spent a lot of time learning about something I didn't need too.

Ron,
Thanks for taking the time, and for finding a flaw.

Originally Posted by kpsmith

Worm,

Can a user create a new shortcut on these computers? Or is that locked down too? Just wondering because you could drag any Web shortcut onto the window to change URL's