Use this file to discover all available pages before exploring further.
Hapara Highlights is a classroom monitoring platform widely used in schools with managed Chromebooks. It gives teachers real-time visibility into student screens, the ability to start Focus Sessions that restrict browsing to approved URLs, lock screens to pause student activity, and view browsing history. Hapara operates through a force-installed Chrome extension and communicates with a teacher dashboard hosted at teacherdashboard.appspot.com. Several exploits exist that target its lock screen overlay, Focus Session URL restrictions, and dashboard visibility.
When a teacher starts a Focus Session, Hapara restricts your browser to a set of allowed URLs. This bypass uses a data: URI bookmarklet to embed an iframe that loads any page, bypassing the restriction since Hapara does not block data: URIs.Requirements:data: links must be allowed by policy.
1
Create the bookmark
Create a new bookmark and paste the following as the URL:
When a Focus Session is active, click the bookmark. A full-screen Google tab will open.
Your teacher may still be able to see your screen, but the Focus Session restriction is bypassed. If the data: URL above doesn’t work, try downloading the iframe HTML file from:
Bypasses the Hapara lock (pause) screen by exploiting a race condition between the bookmark bar rendering and the pause overlay, then disabling Wi-Fi to prevent the teacher from re-pausing.
1
Prepare bookmarks beforehand
Before your screen is paused, create bookmarks for every page you want to visit.
2
Spam unfullscreen when paused
Once your screen is paused, repeatedly press the unfullscreen key. Each time you do, your tabs and bookmark bar should briefly appear at the top of the screen.
3
Add a bookmark folder
While the bar is visible, right-click the bookmarks bar and select Add folder. Name it anything and click Done. With luck, the tab and bookmarks bar will stay visible.
4
Spam-click a bookmark
Spam-click one of your prepared bookmarks. This lags Hapara into displaying your page instead of the pause overlay.
5
Turn off Wi-Fi
As soon as the page fully loads, turn off Wi-Fi. This stops data flow between your device and the teacher’s computer, preventing them from re-pausing your screen.
Uses a clipboard script combined with the browser’s inspect element console to bypass Hapara Highlights and Hapara Filter. This also works on some other web filters.Requirements: Inspect Element must be enabled.
1
Visit the Chaos page
Go to xlak.github.io/chaos and click the button to copy the script to your clipboard.
2
Open a new tab and paste
Open a new tab and paste the script into the URL bar.
3
Open Inspect Element
Right-click anywhere on the page and click Inspect.
4
Paste in the Console
Click the Console tab in DevTools and paste the script again.
5
Handle the inspect window
When an additional inspect window pops up, paste the script there as well.
This method is more complex than the Focus Session iframe bypass. Only use it if simpler methods do not work for your setup.
Injects a full-screen iframe overlay into any tab, allowing you to browse a proxy or any other site without leaving the current page. This bypasses Hapara’s tab monitoring.Requirements: JavaScript bookmarklets must be allowed (patched in newer versions of ChromeOS).
1
Set your target URL in the bookmarklet
Replace WEBSITE HERE in the code below with your proxy or target URL (include https://):
Hapara and iBoss Alphabetic — Invisible Tab Bypass
Opens an unfiltered proxy tab that is invisible on the Hapara teacher dashboard (and also bypasses iBoss). Uses a data: URI bookmarklet that triggers a print event to open a hidden tab outside dashboard visibility.Works best on Hapara Highlights, Hapara Filter, and iBoss.
1
Create the bookmark
Create a bookmark with the following URL (the full encoded bookmarklet from the source):