HPT (Hazard Perception Test) is a test to test your reaction time for hazards when driving. It is required for Queensland drivers to take the test to move from a P1 to P2 licence. The test is taken online where you are shown several one minutes videos, and you must click on the hazard as soon as you spot it. I always like to play around with online systems testing security so I gave this setup a shot. I used the practice tests to see how the system worked, and it was pretty easy to work out a way to cheat the system (like most online exams).
Since it was encrypted using HTTPS Wireshark was out of the question, however this doesn’t mean you can’t still see what’s happening. I found a nice tool called “Live HTTP headers” which shows you all the requests. The first thing I noticed is that the videos are preloaded. You can see all the requested URLs in Live HTTP headers.
To watch one of the videos before taking the test, all you have to do is grab the URL for it (see the screenshot above) and paste that into a new tab. The videos seem to be able to be downloaded at least twice. You can then watch the videos, and then take the exam, and know exactly what’s in the exam / video.
It’s not overly hard to do, and actually quite fun.