This forum is in archive mode. You will not be able to post new content.

Author Topic: Interact with website elements  (Read 832 times)

0 Members and 1 Guest are viewing this topic.

Offline Live Wire

  • Knight
  • **
  • Posts: 189
  • Cookies: 4
  • Up on your Net
    • View Profile
Interact with website elements
« on: November 14, 2012, 02:22:51 PM »
im working on a project. Basically, for this online form, username is firstname.lastname and the password is lastname1234. What im trying to do is post to this website for the purpose of bruteforcing the password with an incrementing number. It's a basic website, selection bar and two fields. I have no problem with the non web part, but I am unsure of how to interact with a website. Tried google. nothing super useful. Most of the results were long strings of spaghetti code. Any thoughts from you guys? Thanks!
 
the page is https://dodea.gradespeed.net/pc/studentlogin.aspx if you want to look at it
 
PS If at all possible, in either java, js, or ruby would be preferred, but something like perl would also be okay
"There is no right or wrong, there is only fun and boring."

Offline RedBullAddicted

  • VIP
  • Sir
  • *
  • Posts: 519
  • Cookies: 189
    • View Profile
Re: Interact with website elements
« Reply #1 on: November 14, 2012, 03:13:23 PM »
Hi,

you want to create a script to bruteforce that site? You can use sockets to connect to the site and send the required post values. A quick capture shows the following

AuthType=Student&FormType=Login&DistrictID=3000010&SchoolID=14012&Username=bla&Password=bla&cmdLogOn=Sign+In

in python you can use urllib/urllib2 to keep it as simple as possible. The value needs to be send to https://dodea.gradespeed.net/pc/StudentLogin.aspx

I could do that in python if you want to but I can't tell when I got that finished. Only thing I would need is a value to query if the login was succesfull. Unsuccessfull = <span id="lblError" class="errorlabel">Invalid Username or password.</span> but successfull= ???
Deep into that darkness peering, long I stood there, wondering, fearing, doubting, dreaming dreams no mortal ever dared to dream before. - Edgar Allan Poe

Offline Kulverstukas

  • Administrator
  • Zeus
  • *
  • Posts: 6627
  • Cookies: 542
  • Fascist dictator
    • View Profile
    • My blog
Re: Interact with website elements
« Reply #2 on: November 14, 2012, 04:07:17 PM »
It would be extremely easy with Python and mechanize. You can look at my Photobucket ripper project for an example: http://evilzone.org/evilzone-releases/a-better-photobucket-ripper/

Offline Live Wire

  • Knight
  • **
  • Posts: 189
  • Cookies: 4
  • Up on your Net
    • View Profile
Re: Interact with website elements
« Reply #3 on: November 14, 2012, 09:56:29 PM »
okay, cool. thats pretty much what i figured. thanks guys!


and thanks for the offer, but i think i can code it myself :)
"There is no right or wrong, there is only fun and boring."

 



Want to be here? Contact Ande, Factionwars or Kulverstukas on the forum or at IRC.