Join us at IRC!
It is never to LATE to become what you never WERE.
Wednesday, May 23, 2012
Navigation
Members Online
Total Online: 31
Web Spiders: 16
Guests Online: 29
Members Online: 2

Registered Members: 70173
Newest Member: TheGreek
Latest Articles
View Thread

HellBound Hackers | Challenges | Timed Challenges

Author

curl login

styloverte116
Member

Posts: 73
Location:
Joined: 11.03.08
Rank:
Hacker Level 3
Posted on 24-03-09 23:12
I'm trying to login through the command line with curl. It acts like the command runs fine but then doesn't log me in. I'm thinking it's cause it's not remembering me so i tried to pass y in for the checkbox but its still not working. here's what i have. can someone tell me what im doing wrong?

curl -d user_name=styloverte116 -d user_pass=<mypasshere:P> -d remember_me=y www.hellboundhackers.org
Author

RE: curl login

spyware
Member



Posts: 4190
Location: The Netherlands
Joined: 14.04.07
Rank:
God
Warn Level: 90
Posted on 24-03-09 23:16
Cookies.




"The chowner of property." - Zeph
“Widespread intellectual and moral docility may be convenient for leaders in the short term,
but it is suicidal for nations in the long term.”
- Carl Sagan
“Since the grid is inescapable, what were the earlier lasers about? Does the corridor have a sense of humor?” - Ebert
http://bitsofspy.net
Author

RE: curl login

styloverte116
Member

Posts: 73
Location:
Joined: 11.03.08
Rank:
Hacker Level 3
Posted on 24-03-09 23:50
hmmm.. can you elaborate a little. it makes sense but not enough to do anything
Author

RE: curl login

spyware
Member



Posts: 4190
Location: The Netherlands
Joined: 14.04.07
Rank:
God
Warn Level: 90
Posted on 24-03-09 23:57
You need to use --dump-header and use the http headers. Basically, type javascblockedript:alert(document.cookie) in a browser, this is the stuff you'll be needing. You need to use the cookies that are sent by HBH.




"The chowner of property." - Zeph
“Widespread intellectual and moral docility may be convenient for leaders in the short term,
but it is suicidal for nations in the long term.”
- Carl Sagan
“Since the grid is inescapable, what were the earlier lasers about? Does the corridor have a sense of humor?” - Ebert
http://bitsofspy.net
Author

RE: curl login

c4p_sl0ck
Member



Posts: 380
Location: Sweden‮‭
Joined: 17.09.06
Rank:
God
Posted on 24-03-09 23:59
Without the cookies that contain the session id and some other stuff, the server won't know who you are.



c4p_sl0ck@hotmail.com
Author

RE: curl login

styloverte116
Member

Posts: 73
Location:
Joined: 11.03.08
Rank:
Hacker Level 3
Posted on 25-03-09 01:11
ok it still doesn't work..
heres what i have now.

curl -d user_name=styloverte116 -d user_pass=<mypass> -D headers.txt -c cookies.txt www.hellboundhackers.org


and while i'm having problems with this.. does anyone know how i can get unlimited buffering in the command prompt on windows?

*EDIT* -- i found the buffering. its not unlimited but i changed it from 50 to 999

Edited by styloverte116 on 25-03-09 01:20
Author

RE: curl login

spyware
Member



Posts: 4190
Location: The Netherlands
Joined: 14.04.07
Rank:
God
Warn Level: 90
Posted on 25-03-09 01:38
I think you're only storing the cookies, not using them.

You're sure that the cookie jar is being created right? Try adding a -v and see if it isn't failing.




"The chowner of property." - Zeph
“Widespread intellectual and moral docility may be convenient for leaders in the short term,
but it is suicidal for nations in the long term.”
- Carl Sagan
“Since the grid is inescapable, what were the earlier lasers about? Does the corridor have a sense of humor?” - Ebert
http://bitsofspy.net
Author

RE: curl login

styloverte116
Member

Posts: 73
Location:
Joined: 11.03.08
Rank:
Hacker Level 3
Posted on 25-03-09 01:44
I thought about that but i can't find any information on how to use them. -v doesn't give me any warning so it should be working.

**EDIT** -- i found an option -b to read in cookies from a text file and used curl -b cookies.txt www.hellboundhackers.org after my first command but it still doesn't work

Edited by styloverte116 on 25-03-09 02:06
Author

RE: curl login

yours31f
Second to one



Posts: 1678
Location: Dallas Texas
Joined: 27.04.07
Rank:
Satan
Posted on 25-03-09 14:04
It's also possible (with firefox for sure) to use the browsers cookies. This may be of use to you in the future.


Debugging is what programmers do to beta software to make it take up more room on your hard drive if it is running too efficiently.



yours31f@live.com yours31f@yahoo.com rpwd.info
Author

RE: curl login

spyware
Member



Posts: 4190
Location: The Netherlands
Joined: 14.04.07
Rank:
God
Warn Level: 90
Posted on 25-03-09 14:51
MoshBat wrote:
Rather than trying to log in, why don't you just run the scblockedript from your local machine, using the cookies you have right now?


Cause he wants to login from the command-line, and from then on use those cookies.




"The chowner of property." - Zeph
“Widespread intellectual and moral docility may be convenient for leaders in the short term,
but it is suicidal for nations in the long term.”
- Carl Sagan
“Since the grid is inescapable, what were the earlier lasers about? Does the corridor have a sense of humor?” - Ebert
http://bitsofspy.net
Author

RE: curl login

spyware
Member



Posts: 4190
Location: The Netherlands
Joined: 14.04.07
Rank:
God
Warn Level: 90
Posted on 25-03-09 15:03
MoshBat wrote:
I can't seem to get my head around why someone would do that...
Really, the method most people use would be much simpler, no?


Yeah, but... HBH displays like shit in Lynx.




"The chowner of property." - Zeph
“Widespread intellectual and moral docility may be convenient for leaders in the short term,
but it is suicidal for nations in the long term.”
- Carl Sagan
“Since the grid is inescapable, what were the earlier lasers about? Does the corridor have a sense of humor?” - Ebert
http://bitsofspy.net
Author

RE: curl login

yours31f
Second to one



Posts: 1678
Location: Dallas Texas
Joined: 27.04.07
Rank:
Satan
Posted on 25-03-09 15:04
What I meant by that is, he would have all his previous cookies and then he wouldn't have to worry about saving them this time.

While on the subject, does anyone have a copy of the libcurl library? My firewall is being a douche and I can't get* to any download pages for it. Thanks.

edit *



Debugging is what programmers do to beta software to make it take up more room on your hard drive if it is running too efficiently.





Edited by yours31f on 25-03-09 15:21
yours31f@live.com yours31f@yahoo.com rpwd.info
Author

RE: curl login

spyware
Member



Posts: 4190
Location: The Netherlands
Joined: 14.04.07
Rank:
God
Warn Level: 90
Posted on 25-03-09 15:07
yours31f wrote:
What I meant by that is, he would have all his previous cookies and then he wouldn't have to worry about saving them this time.

While on the subject, does anyone have a copy of the libcurl library? My firewall is being a douche and I can't to any download pages for it. Thanks.


Which bind do you need? (What language are you programming in?)

Edit: Oh, just actually read your post.

http://curl.haxx.se/libcurl/bindings.html

Fucking idiot.




"The chowner of property." - Zeph
“Widespread intellectual and moral docility may be convenient for leaders in the short term,
but it is suicidal for nations in the long term.”
- Carl Sagan
“Since the grid is inescapable, what were the earlier lasers about? Does the corridor have a sense of humor?” - Ebert


Edited by spyware on 25-03-09 15:13
http://bitsofspy.net
Author

RE: curl login

yours31f
Second to one



Posts: 1678
Location: Dallas Texas
Joined: 27.04.07
Rank:
Satan
Posted on 25-03-09 15:16
Thanks for your help. I am learning http sockets in dev-cpp on windows and I actually came across one. nexttag or something of the like. Thanks again.


Debugging is what programmers do to beta software to make it take up more room on your hard drive if it is running too efficiently.





Edited by yours31f on 25-03-09 15:20
yours31f@live.com yours31f@yahoo.com rpwd.info
Author

RE: curl login

styloverte116
Member

Posts: 73
Location:
Joined: 11.03.08
Rank:
Hacker Level 3
Posted on 25-03-09 21:14
MoshBat wrote:
I can't seem to get my head around why someone would do that...
Really, the method most people use would be much simpler, no?


Yes, the method most people would use is much simpler. Just to clear any questions up, I'm running windows. I don't do a lot of cmd stuff, and have never used curl, and i wanted to get an idea on how to use the command line. i was going to try to do timed 1 from the command prompt. Also, my computer is going too slow. Greasemonkey takes too long with all images disabled, among other things, and hbh in the hosts file and no other programs running and no additional tabs open. I still can't get it to log me in. I couldn't find anything since my last post, so I'm still using the same lines.
Author

RE: curl login

styloverte116
Member

Posts: 73
Location:
Joined: 11.03.08
Rank:
Hacker Level 3
Posted on 31-03-09 00:20
i finally figured it out.

i opened livehttpheaders in firefox and checked what was getting posted and there was a login parameter...

so i used

curl -c cookies.txt -D headers.txt -d "user_name=styloverte116&user_pass=<mypasshere>&login=Login" www.hellboundhackers.org


and then i just used the following to access the page:

curl -b cookies.txt www.hellboundhackers.org


Thanks to everyone who helped.
Author

RE: curl login

986
Member



Posts: 45
Location: Hungary
Joined: 18.01.08
Rank:
Hacker Level 2
Posted on 12-05-09 12:22
I think the '--cookie' is competent, you should paste the cookies from your browser to here.

curl --cookie "COOKIE1=VALUE1; COOKIE2=VALUE2"

But try out 'man curl' anytime. :happy:




Edited by 986 on 12-05-09 12:25
Guest
Username

Password

Remember Me


Bookmark This Page
Affiliates
Adverts

 

 

Links
By using, viewing or obtaining any information contained on this site, you agree to the disclaimer.

© HellBound Hackers 2008- 2009. Since 3rd December 2004.