Programming Forums - View Single Post

hbe02 · Sep 29th, 2006, 7:58 PM

alright i did it... but in a very peculiar way. i made another program which emulates the server of the website that my client program was trying to access it..
this server listens for a connection, it recieves an http get request from the internet browser.. then it send the code i posted below (html/javascript)..
then the server closes the connection.. i filled in the username and password in the Internet browser and clicked submit.. whose request offcource went to my emulation of the webserver im trying to see.. i studied the http request, i didnt find any relation to the page's source code.. this is what happens when you press the submit button:

(Toggle Plain Text)

POST /imp/redirect.php?Horde=4db15905f8d71e1d00e5f2f376adc085 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-
excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwav
e-flash, */*
Referer: http://192.168.141.107/
Accept-Language: en-us
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322
; .NET CLR 2.0.50727)
Host: 192.168.141.107
Content-Length: 193
Connection: Keep-Alive
Cache-Control: no-cache

actionID=105&url=&mailbox=INBOX&imapuser=hbe02&pass=mypassword&server=pop.aub.edu.lb&p
ort=143&namespace=&maildomain=aub.edu.lb&protocol=imap%2Fnotls&realm=&folders=IN
BOX.&new_lang=en_US&button=Log+in

you can notice where the user and pass went.. user:hbe02 , pass: mypassword

after i found out that the internet browser sends this request when i submit the form.. i used this request to access the webserver back in my original web client program..
any critique to my method?

Sep 29th, 2006, 7:58 PM	#5
hbe02 Hobbyist Programmer Join Date: Mar 2006 Location: Lebanon Posts: 148 Rep Power: 3	alright i did it... but in a very peculiar way. i made another program which emulates the server of the website that my client program was trying to access it.. this server listens for a connection, it recieves an http get request from the internet browser.. then it send the code i posted below (html/javascript).. then the server closes the connection.. i filled in the username and password in the Internet browser and clicked submit.. whose request offcource went to my emulation of the webserver im trying to see.. i studied the http request, i didnt find any relation to the page's source code.. this is what happens when you press the submit button: (Toggle Plain Text) POST /imp/redirect.php?Horde=4db15905f8d71e1d00e5f2f376adc085 HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms- excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwav e-flash, / Referer: http://192.168.141.107/ Accept-Language: en-us Content-Type: application/x-www-form-urlencoded Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322 ; .NET CLR 2.0.50727) Host: 192.168.141.107 Content-Length: 193 Connection: Keep-Alive Cache-Control: no-cache actionID=105&url=&mailbox=INBOX&imapuser=hbe02&pass=mypassword&server=pop.aub.edu.lb&p ort=143&namespace=&maildomain=aub.edu.lb&protocol=imap%2Fnotls&realm=&folders=IN BOX.&new_lang=en_US&button=Log+in POST /imp/redirect.php?Horde=4db15905f8d71e1d00e5f2f376adc085 HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms- excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwav e-flash, / Referer: http://192.168.141.107/ Accept-Language: en-us Content-Type: application/x-www-form-urlencoded Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322 ; .NET CLR 2.0.50727) Host: 192.168.141.107 Content-Length: 193 Connection: Keep-Alive Cache-Control: no-cache actionID=105&url=&mailbox=INBOX&imapuser=hbe02&pass=mypassword&server=pop.aub.edu.lb&p ort=143&namespace=&maildomain=aub.edu.lb&protocol=imap%2Fnotls&realm=&folders=IN BOX.&new_lang=en_US&button=Log+in you can notice where the user and pass went.. user:hbe02 , pass: mypassword after i found out that the internet browser sends this request when i submit the form.. i used this request to access the webserver back in my original web client program.. any critique to my method?