Project Status

(TL;DR: Respondus's internal bug tracker has linked to this repository, suggesting that the Lockdown Browser will soon be updated to prevent this tool from working.)

Project Status

Background

Back when COVID first hit, some of my professors began to mandate that we use Respondus Lockdown Browser and Respondus Monitor to write our exams. I was incensed that we were required to install this invasive software on our personal computers and submit to being recorded by some random company, with no option to opt-out. I argued with my professors that this requirement was both unnecessary and unethical, but they refused to budge.

I proceeded to submit a formal complaint to the administration, and after a protracted series of emails, they eventually offered an alternative, and having no other options, I accepted. But this alternate writing method was fairly arduous: before each exam, I would drive to the campus, check out a laptop, and drive back home. On my personal laptop, I would start a video call with my professor who would watch me while I wrote the exam; on the campus laptop, I would use the Lockdown Browser (without Monitor) to take the exam. Once I was finished, I would drive back to campus to return the laptop. And furthermore, I was the only student who was allowed to use this method—everyone else was still required to use Respondus Monitor.

Development

So then why did I decide to write this project?

To show that the Browser is ineffective.

All of my complaints were ignored because the university considers “preventing cheating” to be more important than the privacy of its students. But if the Browser were shown as being completely useless, then the university would have no reason to continue using it.
Help honest students protect their privacy.

Not all students were as lucky as I was to be offered an alternative writing method. I released this project to help the students who legitimately care about their privacy to partially alleviate some of the Browser's flaws.

Of course, it is certainly possible to use this project to cheat on exams, but you could say that about nearly any technology. The mere possibility of cheating is not a valid reason to invade the privacy of every student.

Present Day

Four years ago, I started this project. It has now been three years since I transferred to a different university that does not use any invasive monitoring software, and two years since I have had any access to a computer that runs Windows.

What does this mean for the project? It means that I have little motivation or ability to make any significant updates to it. I do try to reply to issues and discussions whenever possible, but I've been quite slow at responding for this past year since I've been busy with other things. I tend to respond quicker to pull requests though.

Future

So why am I posting this update now? Well, the project has recently jumped in popularity:

Which has likely lead to this:

respondus2.com is an official Respondus domain, and Trac is bug tracking software. This repository being linked to from an internal Respondus bug tracker suggests that the Browser will soon be updated to prevent this project from working.

So what comes next? Well, it's up to you. If you're able to find a way to patch around the Browser's upcoming update, then submit a pull request. Otherwise, you'll need to wait for someone else to do so.

Links

ALEKS doesn't play well?

Haven't really had too many issues prior to now. It seems a PreCalc class uses a site called ALEKS to administer its tests and such. ALEKS redirects to download a version of Lockdown called "LockDownBrowserOEMSetup.exe", and after installation, it doesn't even put an icon on the desktop of the WSB.

When I attempt to open it, it just simply says "Settings Restored" and instructs to open from a browser. ALEKS will only detect this OEM version as installed, so I can't use a different lockdown version, and when I attempt to launch directly through that site, it detects the VM settings. Any idea how to get around this, or you think we're just kinda SOL on the OEM version of LDB?

Error with build.ps1

i already fix it

Extraction of OEM LockDown Browsers via Powershell commands is not possible

I have recently been testing these LockDown Browsers:

It appears to me they are the same, as you can download one or the other and run both as if it were the original; however, I have noticed line 26 of sandbox_run.ps1 does not seem to work as intended. The contents of the InstallShield never extract to Windows\Temp. I also downloaded universal extractor and 7-zip to extract the OEM Browser, to no avail.

I set it up like this:

I have tried recording the InstallShield installation process, but it is the same deal. I hope someone knowledgeable in Powershell can create a workaround, definitely not me.

Error after trying to launch

cd C:\Users\WDAGUtilityAccount\Desktop\runtime_directory\ .\withdll.exe /d:GetSystemMetrics-Hook.dll "C:\Program Files (x86)\Respondus\LockDown Browser Lab OEM\LockDownBrowserLabOEM.exe"

Errors I get while trying to open it like this:

and when I try to launch it through the link I got from the university, I get this error:

Does not automatically open Lockdown

It doesn't seem to auto open the lockdown browser, when I try to open it manually with the withdll command provided in the readme I get this:

` PS C:\Users\WDAGUtilityAccount> cd C:\Users\WDAGUtilityAccount\Desktop\runtime_directory
PS C:\Users\WDAGUtilityAccount\Desktop\runtime_directory> .\withdll.exe /d:GetSystemMetrics-Hook.dll "C:\Program Files (x86)\Respondus\LockDown Browser\LockDownBrowser.exe"

.\withdll.exe : The term '.\withdll.exe' is not recognized `

Doing some more digging I found this while building:

detours.h(40): fatal error C1083: Cannot open include file: 'windows.h': No such file or directory
image.cpp

I probably missed something installing the build tools?

Video/Mic Input Not Working

Hello,

I have attempted the following:

-Used Sandbox-with-Microphone-Camera.wsb instead.
-Manually added AllowVideoInput into my Registry Editor.

The sandbox seems to be detecting the device in Device Manager, but it is completely unusable.

Is there a solution to this issue?

Thanks.

Lockdown Browser: internet privacy concerns

I just took an exam using Lockdown Browser and I'm quite concerned for my internet privacy. Specifically, I had a few Chrome tabs running in the background with apps like Whatsapp web open and have received a few messages. I am afraid that Respondus would be able to intercept those messages and decrypt them.

Do you know if Respondus has the ability to mitm your web traffic (as alleged in this Reddit thread: https://www.reddit.com/r/ReverseEngineering/comments/f6jwpd/the_mechanics_of_lockdown_browser_blogpost/) or whether it sets up a local proxy or has any packet capture functions?

Sandbox Error

Hello,

After doing everything correctly, I tried to start Sandbox.wsb but I have these error messages

Can you help me because I don't know where to start and I have a lockdown browser Lab OEM and if you help me and it works, I can pay you.

Cannot build.

Hello.

When I run build.ps1, I get this error:

Lockdown now closes windows sandbox

Hello there,

Yesterday's lockdown updates now close and detects windows sandbox and proceed to ask to close it up.

Any idea?

Does not work in Windows 11

When building and trying to open Sandbox-with-Microphone-Camera.wsb, LockDown browser does not automatically install.
After manually installing LockDown browser in the Sandbox and launching with .\withdll.exe /d:GetSystemMetrics-Hook.dll "C:\Program Files (x86)\Respondus\LockDown Browser\LockDownBrowser.exe" results in a "You must close the following program before starting LockDown Browser: vmcomputeagent.exe" error.

I am currently using Windows 11 Pro 22H2 and LockDownBrowser v2.1.0.02.

Update server is not supplying update information, or the connection to Update server is blocked. Please try again later.

I followed all of the steps, and no matter what I do Lockdown Browser will not open correctly because the update server cannot be accessed. It would also say the software is installed in Temp folder quickly before the notification window closes itself for a split second. I do have portmaster and vpn on, and turning those off does not remedy the issue. I only have until Wednesday to fix this issue, so please help me ASAP. This is really urgent.

can not build

Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.

Try the new cross-platform PowerShell https://aka.ms/pscore6

PS C:\Windows\system32> cd C:\Users\zhs\Desktop\lockdown-browser
PS C:\Users\zhs\Desktop\lockdown-browser> .\build.ps1
WARNING: The setup configuration provider is not registered. Assuming no registered instances.
Cannot index into a null array.
At C:\Users\zhs\Desktop\lockdown-browser\build.ps1:14 char:5
     pushd (Get-VSSetupInstance)[0].InstallationPath
     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    CategoryInfo          : InvalidOperation: (:) [], ParentContainsErrorRecordException
     FullyQualifiedErrorId : NullArray

I used PowerShell by Administrator, and I had put the install package of lockdown browser in runtime_directory

"LockDown should not be used to log in to your learning system"

Lockdown requires me to use Edge to log into Brightspace and click the link to launch lockdown. Is there any way to get this to work without getting the "remote desktop/terminal services" error when launching lockdown a second time (and from the link)?

(My exam isn't available yet so I'm unable to test it out)
Version: 2.1.0.07

Questions

As long as we wait for the browser to open by itself and don't double click the icon and if we are able to login and navigate freely it should be undetected?

"This browser can't be used while Remote Desktop or Terminal Services are active"

I'm pretty sure it was built properly as lockdown browser indeed opened on its own as described. However, I got this error after it opened. I also tried to run it via the powershell command as recommended, but it did not change anything. I'm using the version LockDownBrowser-2-1-2-04-961615468 of LDB.

Minimizing the Sandbox is detected by the Browser

That's all that it needed? Well that's sure convenient. Merged, and thanks!

Just to clarify, alt-tabbing works fine but minimizing the window does not.

2024-01-10.14-23-49.mp4

Originally posted by @RareSnack in #12 (comment)

Access to pass denied in Windows 11

Hello !

When I try to open the Sandbox.wsb, it seems like the powershell script fail somewhere as the installation program doesn't start. I tried to launch it manually and I find this error :

Do you know how to fix that (and if possible, automatically at each launch) ?

Thanks 👍

issues running build.ps1

I cannot get past running the build.ps1

Detour Alternative

As Detour do not seem to support Windows SDK 10.0.22000.0 and 10.0.22621.0 yet, are there other alternative for injection? On my Windows 11 system I kept getting the missing .dll error whereas everything is smooth in a clean install of Windows 10 environment.

Can't open sandbox.wsb

Any way to run sandbox without respondus opening instantly?

Hello. Just doing some research on this program but am unable to log into my school or access any quizzes from lockdown browser itself, I need to access them through a special link on the regular browser, and then that link opens respondus. Is there any way to run this bypass without respondus opening instantly?

Respondus Sandbox Assignment Submission Issue

I recently encountered an issue with the Respondus exam software while using the Sandbox. Initially, everything seemed to go smoothly, with the Sandbox launching correctly, and Respondus working properly during the assignment. However, when the assignment time expired, I couldn't exit the assignment screen where it displayed "0 seconds remaining," even though it should have automatically closed when the assignment time ended. To exit, I had to click on the "submit" button, but doing so resulted in a red error bar appearing at the top of the screen.

I'm concerned about what caused this anomaly and whether it's a serious issue or a bug. I also want to know if the assignment was still submitted correctly.

I would greatly appreciate an urgent response to this problem and any guidance on how to resolve it.

" This browser can't be used while Remote Desktop or Terminal Services are active."

This error comes up when you must open "Lockdown Browser" from within a school webpage (in this case, a D2L quiz page). The browser (e.g Edge) will launch LockDown Browser and the error comes up.

Manually launching doesn't work since some schools make it so that the Respondus browser can't navigate to any website. All that is shown when the browser is launched by starting the VM or manually starting is the following message as shown in this link.

LockDown Browser - Version 2.1.1.04 detects "VmComputeAgent.exe"

The usual pop-up appears saying "You must close the following application...":
VmComputeAgent.exe
(VmComputeAgent.exe)
Do you want LockDown Browser to attempt to close this application for you?

After this, Windows Sandbox closes itself. Perhaps Respondus patched this?

I have followed thoroughly the whole tutorial for several hours and managed to get the Sandbox running and automatically launching Lockdown Browser.

Does Not Work For Lockdown Browser OEM

I've followed all suggestions made in previous tickets, none worked.

Here is my sandbox_run.ps1 :

# Lockdown Browser in Windows Sandbox
# https://github.com/gucci-on-fleek/lockdown-browser
# SPDX-License-Identifier: MPL-2.0+
# SPDX-FileCopyrightText: 2020-2024 gucci-on-fleek

# DON'T RUN THIS ON YOUR REGULAR SYSTEM! IT WILL CAUSE **IRREVERSIBLE** DAMAGE

$ErrorActionPreference = "Stop"
Set-StrictMode -Version 3

cd $PSScriptRoot

$lockdown_extract_dir = "C:\Windows\Temp\Lockdown"
$lockdown_runtime = "C:\Program Files (x86)\Respondus\LockDown Browser OEM\LockDownBrowserOEM.exe"
$lockdown_installer = (ls Lockdown*)[0]

Get-ChildItem -Path "HKLM:\HARDWARE\DESCRIPTION" | Remove-ItemProperty -Name SystemBiosVersion -ErrorAction Ignore
rm HKLM:\HARDWARE\DESCRIPTION\System\BIOS -ErrorAction Ignore

# We're in a short-lived VM, so we can safely delete any necessary files
$vmcompute_path = "C:\Windows\System32\VmComputeAgent.exe"
takeown /f $vmcompute_path
icacls $vmcompute_path /grant "Everyone:(D)"
rm $vmcompute_path

& $lockdown_installer /x "`"$lockdown_extract_dir`"" # Dumb installer needs a quoted path, even with no spaces. Also, we have to extract the program before we can even run a silent install.
while (!(Test-Path $lockdown_extract_dir\id.txt)) {
    # This is the easiest way to detect if the installer is finished extracting
    sleep 0.2
}
sleep 1
kill -Name *Lockdown*

& "$lockdown_extract_dir\setup.exe" /s "/f1$PSScriptRoot\setup.iss" "/f2$PSScriptRoot\..\setup.log" # If we don't give a log file path, this doesn't work
Wait-Process -Name "setup"

# Support use of the `rldb://` URL protocol
New-PSDrive -PSProvider registry -Root HKEY_CLASSES_ROOT -Name HKCR
Set-ItemProperty -ErrorAction Ignore -Path "HKCR:\rldb\shell\open\command" -Name "(Default)" -Value ('"' + $PSScriptRoot + '\withdll.exe" "/d:' + $PSScriptRoot + '\GetSystemMetrics-Hook.dll" ' + $lockdown_runtime + ' "%1"')
Set-ItemProperty -ErrorAction Ignore -Path "HKCR:\anst\shell\open\command" -Name "(Default)" -Value ('"' + $PSScriptRoot + '\withdll.exe" "/d:' + $PSScriptRoot + '\GetSystemMetrics-Hook.dll" ' + $lockdown_runtime + ' "%1"')
Set-ItemProperty -ErrorAction Ignore -Path "HKCR:\cllb\shell\open\command" -Name "(Default)" -Value ('"' + $PSScriptRoot + '\withdll.exe" "/d:' + $PSScriptRoot + '\GetSystemMetrics-Hook.dll" ' + $lockdown_runtime + ' "%1"')
Set-ItemProperty -ErrorAction Ignore -Path "HKCR:\ielb\shell\open\command" -Name "(Default)" -Value ('"' + $PSScriptRoot + '\withdll.exe" "/d:' + $PSScriptRoot + '\GetSystemMetrics-Hook.dll" ' + $lockdown_runtime + ' "%1"')
Set-ItemProperty -ErrorAction Ignore -Path "HKCR:\ldb\shell\open\command" -Name "(Default)" -Value ('"' + $PSScriptRoot + '\withdll.exe" "/d:' + $PSScriptRoot + '\GetSystemMetrics-Hook.dll" ' + $lockdown_runtime + ' "%1"')
Set-ItemProperty -ErrorAction Ignore -Path "HKCR:\ldb1\shell\open\command" -Name "(Default)" -Value ('"' + $PSScriptRoot + '\withdll.exe" "/d:' + $PSScriptRoot + '\GetSystemMetrics-Hook.dll" ' + $lockdown_runtime + ' "%1"')

./withdll /d:GetSystemMetrics-Hook.dll $lockdown_runtime`

Then I build, run the Sandbox, Install the Lockdown Browser OEM, and run the:
.\withdll.exe /d:GetSystemMetrics-Hook.dll "C:\Program Files (x86)\Respondus\LockDown Browser OEM\LockDownBrowserOEM.exe" "%1"

When I Open Lockdown Browser with the exam link, i get the following error:

Error with date or firewall

.

macOS Support

Hi man,

Great work!
Is there any way to use this bypass for LDB on a Mac?

Cheers

Does not work anymore because browser detects the sandboc

Lockdown detects alt tabbing

Hi there,

As of this week’s update, if you have the windows sandbox minimized and opening it up again, it detects that and sends to the instructor about it.

Even if you for example open Google chrome over the windows sandbox, then minimize Google chrome, a warning would pop up. If you do it again, the lockdown closes down.

The same thing does for using on a touch screen as well.

Opening Sandbox.wsb doesn't open lockdown browser, and when trying the workaround, it does not work

PS C:\Users\WDAGUtilityAccount> cd C:\Users\WDAGUtilityAccount\Desktop\runtime_directory\

.\withdll.exe /d:GetSystemMetrics-Hook.dll "C:\Program Files (x86)\Respondus\LockDown Browser\LockDownBrowser.exe"
withdll.exe: Starting: "C:\Program Files (x86)\Respondus\LockDown Browser\LockDownBrowser.exe"' withdll.exe: with C:\Users\WDAGUtilityAccount\Desktop\runtime_directory\GetSystemMetrics-Hook.dll'
withdll.exe: DetourCreateProcessWithDllEx failed: 2

Any ideas on what the issue is / work arounds?

Problems exiting the exam screen

I recently had a problem with the Sandbox on Respondus, as everything went smoothly and therefore the Sandbox started correctly and Respondus worked correctly even during the exam. However, when the exam time expired… no I was no longer able to exit the exam screen where "0 seconds remaining" was shown as the duration of the exam was over, so to be able to exit the exam despite having to exit automatically when the time available for the exam was over I I clicked on submit to send the exam and when I did I exited the exam screen, but a red bar with the word "error" was shown at the top and then I decided to close Blackboard. what caused this anomaly regarding the fact that at the end of the time available for the exam I did not automatically exit the exam screen and therefore I had to click on submit to exit and when I did I found a bar with error written . how can it be solved? Is it nothing serious or is it a bug? Is the exam still sent correctly? I kindly await an urgent response to this problem. many thanks in advance

the browser wont start saying update server is blocked

webcam and microphone not working for macbook pro running windows 10 partition

installed windows 10 pro using bootcamp, everything runs normally but the camera doesn't work and gives an error "NotReadableError: Could not start video source".

everything is up to date,
camera works outside of sandbox
for some reason windows sanbox does not exist in
gpedit Computer Configuration\Administrative Templates\Windows Components\Windows Sandbox
nor
regedit HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox.

windows 10 pro, version: 22H2, OS build: 19045.3448

3-Finger Swipe Gesture Detected

I'm not sure if there is any way to bypass this being detected but it wouldn't hurt to bring it up here.

I have some questions about Lockdown Browser in Windows Sandbox.

I have followed all the instructions， but the Lockdown Browser doesn't launch. Here are the pictures.

Could you please tell me what should I do?
Really thanks!!!

Does not work on VM

I went through all the steps, and I was able to get into a test. After I scrolled down a little bit I got a picture with a moose that told me a VM was detected and it promptly closed. This was ran on a VM, and there were no issues when ran on a host os.

Running build.ps1 no longer works with the current version of Visual Studio C++ Tools.

nmake : The term 'nmake' is not recognized as the name of a cmdlet,
function, script file, or operable program. Check the spelling of the name,
or if a path was included, verify that the path is correct and try again.

It seems to me that this is an issue with Microsoft more than it is with this repo but an updated guide would nice. Unless there's a quick fix that I haven't been able to find yet.

HELP HELP HELP

why would u ban a player who reconnected while hero pick? how to play without getting reported by toxic players when i dont even chat? does this happen only in sea server? why is d2 becoming so toxic that we cant eVen reach the devs for help?

I get the terminal services error when opening manually again from my organisations link

Error after trying to launch

it wouldn't let me access the blackboard after I launched the sandbox, it only says that I had to connect to the University Wi-Fi, but I was already connected to the University Wi-Fi. this problem didn't happen when i launched the sandbox at home.

This browser can't be used while Remote Desktop or Terminal Services are active.

Hello, I recently did this (because I only have one device to do quizzes and I'm afraid LockDown Browser might F up my only laptop). It updates the latest .exe file that I have and then it shows this:

I did the building and running the script correctly (based on following your demo video). So I'm not sure why this happens, or maybe they have patched it or did some update. My previous version is LockDownBrowser-2-0-7-06.exe.

Any chance you can point me to the right direction, on what coding to do? I'm not that proficient in coding but I am willing to follow instructions. We still have a month before we will use Respondus so I was thinking of preparing. Worst case scenario if I'm too stupid to try the solution, I might just borrow another device.

Error to start lockdown browser : Remote Desktop or Terminal Service are active

This browser can't be used while Remote Desktop or Terminal Service are active.

Unable to Open Exam

Lockdown opens properly in the sandbox and you are able to log in and navigate canvas, but once you select an exam it gives you this error message:
"Unable to Open Exam
In order to take a New Quizzes exam with LockDown Browser, you must first use a standard browser (e.g. Chrome, Firefox, etc.) to navigate to the exam. Lockdown Browser will open automatically when you select "Begin."

Select OK now to close LockDown Browser."

Are there any noted solutions to this issue?
Much appreciated!!

Using with versions ≥ `2.1.2.04` may get your account permanently banned.

No longer operational. No idea how or what was done.

"LockDown Browser has been illicitly modified" message in v2.0.9.00

After updating the Lockdown Browser to version 2.0.9.00, the browser refuses to load and presents the following warning in a message box:

LockDown Browser has been illicitly modified, or your PC is unable to validate its certificate. The software will now shut down and you will be unable to continue. We recommend performing a Windows update to see if that fixes the issue. Your instructor has been notified of this issue.

This is a known issue, with no current fix available. I am currently working on patching this; however, it may be some time until a fix is available. Any PRs to fix the issue will be greatly appreciated.

Issue when I click open from my school site

when I try to start the exam and click lunch on lock down browser I got this issue

gucci-on-fleek / lockdown-browser Goto Github PK

lockdown-browser's Issues

Project Status

Background

Development

Present Day

Future

Links

Recommend Projects

Recommend Topics

Recommend Org