Re: can't login with curl in forum

Hey.

Late to the conversation. If I understand the part of the thread I've
seen, you're trying to use curl to login to a site. If this is
correct. Use the browser (Firefox/Chrome) and disable the javascript,
and see if you can login with javascript not working. If you can
successfully get in, then you know you should be able to craft a curl
process to statically login to the site.

If the disabled attempt doesn't work, then you still might be able to
login, but it would mean you have to "replicate" the logic performed
by the javascript process.

Making sure the browser/javascript is enabled, and that you can login.
There should be a "create curl" function somewhere in/on the browser.
This would essentially replicate what the browser has done, using a
curl statement to generate the curl action url+headers etc. Keep in
mind, some login processes are multi step processes. As for the
browser/curl function, google might need to help show you where this
function is. I can't recall at the moment!

And, if you've already done the above steps, my bad!

good luck!

On Wed, May 13, 2020 at 8:25 AM mierdatutis mi via curl-users
<curl-users_at_cool.haxx.se> wrote:
>
> Thanks David,
> What do you men with duplicate headers? I only see a post call in chrome network tool.
>
> About the data part, I only have to fill in form username and password that I put in the curl command, the rest of command that I put is get of chrome network tool.
>
>
>
> El mié., 13 may. 2020 a las 13:58, David Colter via curl-users (<curl-users_at_cool.haxx.se>) escribió:
>>
>> Hi,
>>
>> curl -vvv 'http://labsk.net/index.php?action=login2' \
>> -H 'Connection: keep-alive' \
>> -H 'Cache-Control: max-age=0' \
>> -H 'Upgrade-Insecure-Requests: 1' \
>> -H 'Origin: http://labsk.net' \
>> -H 'Content-Type: application/x-www-form-urlencoded' \
>> -H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36' \
>> -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9' \
>> -H 'Referer: http://labsk.net/index.php?action=login' \
>> -H 'Accept-Language: en-US,en;q=0.9,es;q=0.8,pt;q=0.7,zh-CN;q=0.6,zh;q=0.5,de;q=0.4,fr;q=0.3' \
>> -H 'x-signature: oyQbrF4XBHg40wQdzJytES6thC9z2z+rvs+KQpcIn8M=' \
>> -H 'timestamp: 1589063737703' \
>> --data 'user=USER%40gmail.com&passwrd=PASSSSS&cookieneverexp=on&c13a08a29=bd8cf50879be944ee415b1319081f6dd&hash_passwrd=' \
>> --compressed \
>> -c cookies.txt
>>
>>
>> A couple ideas to try. In my experience with login scripts, the trick to make them work was to exactly duplicate the headers sent, as seen in the network tool. In this way, my scripts never the first 4 -H headers you use. Secondly, the x-signature and timestamp might be different for each post. Third, The 3rd piece of your --data might also be dynamic. You may have to parse the original login page for these values.
>>
>> David
>> -----------------------------------------------------------
>> Unsubscribe: https://cool.haxx.se/list/listinfo/curl-users
>> Etiquette: https://curl.haxx.se/mail/etiquette.html
>
> -----------------------------------------------------------
> Unsubscribe: https://cool.haxx.se/list/listinfo/curl-users
> Etiquette: https://curl.haxx.se/mail/etiquette.html

-----------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-users
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2020-05-13