Skip to main content

Documentation Index

Fetch the complete documentation index at: https://mintlify.com/S-PScripts/chromebook-utilities/llms.txt

Use this file to discover all available pages before exploring further.

Hapara Highlights is a classroom monitoring platform widely used in schools with managed Chromebooks. It gives teachers real-time visibility into student screens, the ability to start Focus Sessions that restrict browsing to approved URLs, lock screens to pause student activity, and view browsing history. Hapara operates through a force-installed Chrome extension and communicates with a teacher dashboard hosted at teacherdashboard.appspot.com. Several exploits exist that target its lock screen overlay, Focus Session URL restrictions, and dashboard visibility.

Focus Session Bypass

When a teacher starts a Focus Session, Hapara restricts your browser to a set of allowed URLs. This bypass uses a data: URI bookmarklet to embed an iframe that loads any page, bypassing the restriction since Hapara does not block data: URIs.Requirements: data: links must be allowed by policy.
1

Create the bookmark

Create a new bookmark and paste the following as the URL:
data:text/html,<!DOCTYPE html> <html> <head> <title>full screen iframe</title> <style type="text/css"> html { overflow: auto; } html, body, div, iframe { margin: 0px; padding: 0px; height: 100%; border: none; } iframe { display: block; width: 100%; border: none; overflow-y: auto; overflow-x: hidden; } </style> </head> <body> <iframe src="https://www.google.com" frameborder="0" marginheight="0" marginwidth="0" width="100%" height="100%" scrolling="auto" id="google"> </iframe> </body> </html>
2

Click the bookmark during a Focus Session

When a Focus Session is active, click the bookmark. A full-screen Google tab will open.
Your teacher may still be able to see your screen, but the Focus Session restriction is bypassed. If the data: URL above doesn’t work, try downloading the iframe HTML file from:A version that lets you enter any link is available at: https://github.com/HeroLink6/Hapara-Focus-Session-Bypass/blob/main/Hapara-IframeV2.htmlIf none of the above work, try this base64 data URI:
data:text/html;base64,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
Credits: HeroLink6, 3kh0/ext-remover

Lock Screen Bypass

Bypasses the Hapara lock (pause) screen by exploiting a race condition between the bookmark bar rendering and the pause overlay, then disabling Wi-Fi to prevent the teacher from re-pausing.
1

Prepare bookmarks beforehand

Before your screen is paused, create bookmarks for every page you want to visit.
2

Spam unfullscreen when paused

Once your screen is paused, repeatedly press the unfullscreen key. Each time you do, your tabs and bookmark bar should briefly appear at the top of the screen.
3

Add a bookmark folder

While the bar is visible, right-click the bookmarks bar and select Add folder. Name it anything and click Done. With luck, the tab and bookmarks bar will stay visible.
4

Spam-click a bookmark

Spam-click one of your prepared bookmarks. This lags Hapara into displaying your page instead of the pause overlay.
5

Turn off Wi-Fi

As soon as the page fully loads, turn off Wi-Fi. This stops data flow between your device and the teacher’s computer, preventing them from re-pausing your screen.
Credits: Brandon421-ops

Chaos

Uses a clipboard script combined with the browser’s inspect element console to bypass Hapara Highlights and Hapara Filter. This also works on some other web filters.Requirements: Inspect Element must be enabled.
1

Visit the Chaos page

Go to xlak.github.io/chaos and click the button to copy the script to your clipboard.
2

Open a new tab and paste

Open a new tab and paste the script into the URL bar.
3

Open Inspect Element

Right-click anywhere on the page and click Inspect.
4

Paste in the Console

Click the Console tab in DevTools and paste the script again.
5

Handle the inspect window

When an additional inspect window pops up, paste the script there as well.
This method is more complex than the Focus Session iframe bypass. Only use it if simpler methods do not work for your setup.
Credits: xlak — https://github.com/xlak

Portable Searching

Injects a full-screen iframe overlay into any tab, allowing you to browse a proxy or any other site without leaving the current page. This bypasses Hapara’s tab monitoring.Requirements: JavaScript bookmarklets must be allowed (patched in newer versions of ChromeOS).
1

Set your target URL in the bookmarklet

Replace WEBSITE HERE in the code below with your proxy or target URL (include https://):
javascript:((function(){
var a,b,c;c="WEBSITE HERE",
b=document.createElement("iframe"),
b.setAttribute("src",c),b.setAttribute("id","rusic-modal"),
b.setAttribute("style","position: fixed; width: 100%; height: 100%; top: 0; left: 0; right: 0; bottom: 0; z-index: 99999999999; background-color: #fff;"),
a=document.getElementsByTagName("body")[0],
a.appendChild(b)})).call(this)
2

Create the bookmark

Create a bookmark using the code above as the URL.
3

Create a close bookmark

Create a second bookmark to close the iframe when done:
javascript: var element = document.getElementById("rusic-modal"); element.parentNode.removeChild(element);
4

Click the bookmark

Click the bookmark on any tab to open the fullscreen overlay.
Credits: Titanium Network

Hapara and iBoss Alphabetic

Opens an unfiltered proxy tab that is invisible on the Hapara teacher dashboard (and also bypasses iBoss). Uses a data: URI bookmarklet that triggers a print event to open a hidden tab outside dashboard visibility.Works best on Hapara Highlights, Hapara Filter, and iBoss.
1

Create the bookmark

Create a bookmark with the following URL (the full encoded bookmarklet from the source):
data:text/html;javascript:eval(atob('dmFyIEg9eCxUPXg7KGZ1bmN0aW9uKFosdil7dmFyIE89eCxZPXgsZT1aKCk7d2hpbGUoISFbXSl7dHJ5...'))
(See the Alphabetic source file for the complete data URI)
2

Click the bookmark and immediately print

Click the bookmark and right after, print the page with Ctrl+P.
3

Handle the 404 page

Click Try again on the 404 page that appears.
4

Run the script again

Run the bookmarklet script again.
A proxy tab should now be open that is invisible on the teacher’s dashboard.Credits: xlak (https://github.com/xlak), AshtonDavies (https://chrose.netlify.app/detail/alphabetic/), Brandon421-ops

Build docs developers (and LLMs) love