CGIProxy was the start of a prolonged cat-and-mouse game between the IT staff and a group of students at my school. It started with finding public hosts ("inurl

CGIProxy was the start of a prolonged cat-and-mouse game between the IT staff and a group of students at my school. It started with finding public hosts ("inurl:nph-proxy.cgi"), and quickly evolved to self-hosting CGIProxy on custom domains/ports. Portable Firefox could be used to sidestep some of the filtering software, until they started auto-closing any window with "Firefox" in the title and .exes called firefox.exe (both of which could also be worked around). It culminated in them creating their own domain admin account so they could disable most of the blocking/monitoring software (the main domain admin's account password being "school" made this _much_ easier than it should have been). They only got caught because one of them was logged as using a USB drive called "<surname>'s USB" while logged in the domain admin account, which served as an interesting lesson in OPSEC.