|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 66
Members: 0
Total: 66
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
How to send modified data to javascript page? |
|
Posted: Mon Oct 26, 2009 4:55 pm |
|
|
zerocred |
Beginner |
|
|
Joined: Oct 08, 2009 |
Posts: 4 |
|
|
|
|
|
|
|
I want to automate interaction with a website that has a javascript UI, data is sent by point and clicking various options that are loaded into a form and then sent by clicking the 'send' button.
What I want to do is automate it by bypassing the point and click code so that I can programatically present my data to it and initiate the 'send' from another (perl) program.
I can see the javascript files (there are quite many) - how do I initiate the send message my own?
Can it be done? |
|
|
|
|
|
|
|
|
Posted: Wed Oct 28, 2009 2:47 pm |
|
|
lenny |
Valuable expert |
|
|
Joined: May 15, 2008 |
Posts: 275 |
|
|
|
|
|
|
|
Ok, I suggest you download "tamper data" - A plugin for Firefox. When you submit the page, a request is probably generated (AJAX or otherwise) and submitted to another part of the site (a php script for example).
I suggest you use tamper data to see what data is being sent, and where the data is being sent to (ie, the request target). Once you know this, you should be able to find a perl module or similar to send a similar request that you can modify as you like
Questions? Thoughts? |
|
|
|
|
|
|
|
|
Posted: Wed Oct 28, 2009 8:08 pm |
|
|
zerocred |
Beginner |
|
|
Joined: Oct 08, 2009 |
Posts: 4 |
|
|
|
|
|
|
|
Thanks for the suggestions. Unfortunately the site only works with IE - they spend quite a lot of effort ensuring it is only IE and windows running. I tried UserAgent switching in Firefox but it didn't work.
I was able to use Fiddler to see what is in the messages (they are encrypted normally) but the data is signed so simply tampering with the data doesn't work either. |
|
|
|
|
www.waraxe.us Forum Index -> General discussion
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|