cURL / Mailing Lists / curl-users / Single Mail

curl-users

Hash & redirect, try to work with cURL like web browser behaviour

From: Florian Bidabé <anonym75_at_laposte.net>
Date: Sat, 14 Mar 2009 19:42:43 +0100

Hi,

I'm a young network administrator (I've finished my studies many months ago)

 I've discovered cURL few weeks ago, and I am impassioned about it, it's incredible what this light program is able to do.

In fact, I've progressed a lot (using and mastering different parameters) but I discover regularly different problems.

By example:

à CAPCHAR, but I don't think that's possible to break it, or jump it (or maybe with a POST ASCII/binary php injection ?!)

à Hash generation by server et recovering (or keeping back) by cURL

à Redirect web page

 

I've aggravating problems with these two last

The server send me a webpage with a relative redirect URL (and not absolute), and I don't know how I can do in order to automatically launch the server web page result with cURL :

 

I type :

Curl -d "var1=value1&var2=value2&var3=value3" http://website.com

 

Server answer :

HTTP/1.1 200 OK

Date: Sat, 14 Mar 2009 04:48:47 GMT

Server: Apache/2.2.4 (Unix) mod_ssl/2.2.4 OpenSSL/0.9.7a PHP/4.3.8

X-Powered-By: PHP/5.2.1

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: PHPSESSID=4985d403c4c8b7b2240e7c32ae33455d; path=/; domain=.yrd-webapp

Connection: close

Content-Type: text/html

 

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

 

<html xmlns="http://www.w3.org/1999/xhtml">

                <head>

                               <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />

                               <title></title>

                               <meta http-equiv="Refresh" content="0;URL=confirmation.htm?subscriber=new&hash=85d8a419534cbe07fa9bd7a63ebd6f7243ac4d30" />

                </head>

                <body>

                </body>

</html>

 

GET /fs/webapv2/fr/confirmation.htm?subscriber=new&hash=85d8a419534cbe07fa9bd7a63ebd6f7243ac4d30 HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/msword, */*

Referer: http://www.website.com/FS/control/viewcontent?contentId=g-t

Accept-Language: fr

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Host: www.website2.com

Proxy-Connection: Keep-Alive

Pragma: no-cache

 

 

 

So I can save the result as a file and manually read it, I can recover the hash code and re create a absolute URL (the domain web site)

 

So manually, I can launch the correct URL (with GET option) with cURL but not automatically, and it's what I would like to do.

 

Is it possible please ? I really want to learn how doing this.

Thx a lot

 

 

-------------------------------------------------------------------
List admin: http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2009-03-14