asr-exploit

This webview was found by me, S-PScripts.

Discovery:

-> ASR was one of the two apps our school allowed from the Play Store, the other being myViewboard WhiteBoard. Unlike myViewboard, ASR was force-installed without any way to uninstall it.

-> I knew that this app had to have a webview somewhere but every time I checked I couldn't find any.

-> Even though I had already managed to find one in myViewboard (https://github.com/S-PScripts/myviewboard-exploit), I was determined to find one in ASR.

-> And eventually I managed to do it! At 11:00pm..

-> Enough of me talking now, here are the instructions.

Instructions:

1. Go to the download page for ASR here: https://play.google.com/store/apps/details?id=com.nll.asr&referrer=utm_source%3Dwebsite%26utm_medium%3Dhome-page
2. Install ASR. If you can't, you cannot do this exploit.
3. Open ASR and accept the privacy policy.
4. It will make you click all the buttons in the recorder to continue. Once you've done that, click the 3 dots icon at the top right.
5. Click Settings.
6. After the settings window opens, click the Cloud Services section.
7. Click the green + Add button at the bottom right.
8. Follow one of the two methods below. I recommend Method 1 (since it's used in most webviews and it's probably easier to do).

Method 1:

9. Click OneDrive/Business.
10. Click the green Connect to the service button.
11. A Microsoft sign-in screen will appear. If you've seen other webviews, you probably know what will happen now.
12. Click Sign-in options.
13. Click Sign in with Github.
14. Click the Github logo.
15. In the search box at the top right, type Google.
16. Click Search all of Github.
17. Click the Google link in the infobox about Google to the right of the screen.
18. You are in Google and all websites are unblocked!
19. As there are no tabs, use the forward and back keys on the top row of your keyboard.

Method 2:

9. Click Box.
10. Click the green Connect to the service button.
11. After the authenticating screen, a box sign-in screen will show up. Click Terms of Service or Privacy Policy.
12. On the cookie popup at the bottom that shows up (with the Accept all, Reject all and Customize buttons), click on "here" in the second/last sentence.
13. On the cookie notice page, scroll down a bit to see a table.
14. Find Google in this table (second column) and look at the third column next to it.
15. In this third column, click the first "here".
16. Scroll to the bottom on the Google Privacy page.
17. Click the small grey Google text.
18. You are in Google and all websites are unblocked!
19. As there are no tabs, use the forward and back keys on the top row of your keyboard.

Issues:

-> It's a bit slow and images load slowly/don't load correctly.

Credits:

S-PScripts (me) | https://github.com/S-PScripts