Posts
What the school Chrome extension does & what that means for getting around it
-
Ways to beat the GoGuardian restrictions: what the same capture file says worksnew
No certificate pinning, a 76,772-byte policy body replayed with a captured token, deleted storage that stayed deleted, & an iframe hole that is one admin toggle wide. Each workaround tested against the live extension, with what the district sees when you try it.
-
Reverse-engineering GoGuardian: what the school Chrome extension does
20 permissions, one browsing upload every 60 seconds, & a Windows program that can lock the screen. The read-only teardown: 31 files beautified, 30 backend routes mapped, 2,800+ requests captured off the wire.